summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorJo-Philipp Wich <jow@openwrt.org>2009-08-13 14:36:18 +0000
committerJo-Philipp Wich <jow@openwrt.org>2009-08-13 14:36:18 +0000
commit6b1be858be3f462d0e81a3fc6c3483041115c046 (patch)
tree41a5b5df4c1422a50aee81ebc7180a8924a4dba4
parent8f580be880db9c79613434d4dfce65e864281944 (diff)
libs/cbi: properly escape values in dynlist widget (#79)
-rw-r--r--libs/cbi/luasrc/view/cbi/dynlist.htm2
1 files changed, 1 insertions, 1 deletions
diff --git a/libs/cbi/luasrc/view/cbi/dynlist.htm b/libs/cbi/luasrc/view/cbi/dynlist.htm
index a23a4ebcdf..1f3b901410 100644
--- a/libs/cbi/luasrc/view/cbi/dynlist.htm
+++ b/libs/cbi/luasrc/view/cbi/dynlist.htm
@@ -18,7 +18,7 @@ $Id$
for i=1, #vals + 1 do
local val = vals[i]
%>
- <input class="cbi-input-text" value="<%=val%>" onchange="cbi_d_update(this.id)" type="text"<%= attr("id", cbid .. "." .. i) .. attr("name", cbid) .. ifattr(self.size, "size")%> />
+ <input class="cbi-input-text" value="<%=luci.util.pcdata(val)%>" onchange="cbi_d_update(this.id)" type="text"<%= attr("id", cbid .. "." .. i) .. attr("name", cbid) .. ifattr(self.size, "size")%> />
<% if i <= #vals then %>
<input class="cbi-input-image" type="image" value="<%:cbi_del%>" name="cbi.rle.<%=section .. "." .. self.option .. "." .. i%>" alt="<%:cbi_del%>" title="<%:cbi_del%>" src="<%=resource%>/cbi/remove.gif" />
<% else %>