Fixed: #3549 XSS under graph preview mode (#3600)

Co-authored-by: Jing Chen <three_chenjing@sohu.com>
Cacti · Jun 9, 2020 · a3233a1 · a3233a1
1 parent de5e60c
commit a3233a1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/html_graph.php b/lib/html_graph.php
@@ -178,7 +178,7 @@ function html_graph_preview_filter($page, $action, $devices_where = '', $templat
 											}
 										}
 										print '>';
-										print $gt['name'] . "</option>\n";
+										print html_escape($gt['name']) . "</option>\n";
 									}
 								}
 							}