HTML escape command description

webmin · Nov 27, 2017 · a9c97ee · a9c97ee
1 parent bf07be5
commit a9c97ee
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/custom/run.cgi b/custom/run.cgi
@@ -40,8 +40,9 @@ if ($cmd->{'format'} ne 'redirect' && $cmd->{'format'} ne 'form') {
 		print "\n";
 		}
 	else {
-		&ui_print_unbuffered_header($cmd->{'desc'}, $text{'run_title'},
-					    "", -d "help" ? "run" : undef);
+		&ui_print_unbuffered_header(
+			&html_escape($cmd->{'desc'}), $text{'run_title'},
+			"", -d "help" ? "run" : undef);
 		}
 	}