Skip to content

Commit 84d8edd

Browse files
committed
Ensure ACB entry reasons are encoded. Fixes #15927
1 parent cca4278 commit 84d8edd

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

src/usr/local/www/services_acb.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -423,7 +423,7 @@
423423
?>
424424
<tr>
425425
<td><?= $cv['localtime']; ?></td>
426-
<td><?= $cv['reason']; ?></td>
426+
<td><?= htmlspecialchars($cv['reason'], double_encode: false); ?></td>
427427
<td>
428428
<a class="fa-solid fa-undo" title="<?=gettext('Restore this revision')?>" href="services_acb.php?hostname=<?=urlencode($hostname)?>&userkey=<?=urlencode($userkey)?>&newver=<?=urlencode($cv['time'])?>" onclick="return confirm('<?=gettext("Are you sure you want to restore {$cv['localtime']}?")?>')"></a>
429429
<a class="fa-solid fa-download" title="<?=gettext('Show info')?>" href="services_acb.php?download=<?=urlencode($cv['time'])?>&hostname=<?=urlencode($hostname)?>&userkey=<?=urlencode($userkey)?>&reason=<?=urlencode($cv['reason'])?>"></a>

0 commit comments

Comments
 (0)