Fix #17870: XSS in adm_config_report.php

mantisbt · Nov 14, 2014 · b509ab3 · b509ab3
1 parent 7b0ec64
commit b509ab3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/adm_config_report.php b/adm_config_report.php
@@ -486,7 +486,7 @@ function print_option_list_from_array( array $p_array, $p_filter_value ) {
 				<label for="config-option"><span><?php echo lang_get( 'configuration_option' ) ?></span></label>
 				<span class="input">
 					<input type="text" name="config_option"
-						value="<?php echo $t_edit_option; ?>"
+						value="<?php echo string_display_line( $t_edit_option ); ?>"
 						size="64" maxlength="64" />
 				</span>
 				<span class="label-style"></span>