From 77e57443416fc12f77a1bcf23a7f0341b8d12f9f Mon Sep 17 00:00:00 2001 From: DukePyrolator Date: Fri, 22 Nov 2013 01:22:24 +0100 Subject: [PATCH] fixed webcpanel not html escaping displayed memos, bug reported by Mietzie --- modules/extra/webcpanel/pages/memoserv/memos.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/extra/webcpanel/pages/memoserv/memos.cpp b/modules/extra/webcpanel/pages/memoserv/memos.cpp index 5dc1456b9..13c3dbda9 100644 --- a/modules/extra/webcpanel/pages/memoserv/memos.cpp +++ b/modules/extra/webcpanel/pages/memoserv/memos.cpp @@ -101,7 +101,7 @@ bool WebCPanel::MemoServ::Memos::OnRequest(HTTPProvider *server, const Anope::st replacements["NUMBER"] = stringify(i+1); replacements["SENDER"] = m->sender; replacements["TIME"] = Anope::strftime(m->time); - replacements["TEXT"] = m->text; + replacements["TEXT"] = HTTPUtils::Escape(m->text); if (m->unread) replacements["UNREAD"] = "YES"; else