diff options
| author | Jo-Philipp Wich <jow@openwrt.org> | 2009-08-13 14:36:18 +0000 |
|---|---|---|
| committer | Jo-Philipp Wich <jow@openwrt.org> | 2009-08-13 14:36:18 +0000 |
| commit | 6b1be858be3f462d0e81a3fc6c3483041115c046 (patch) | |
| tree | 41a5b5df4c1422a50aee81ebc7180a8924a4dba4 /libs | |
| parent | 8f580be880db9c79613434d4dfce65e864281944 (diff) | |
libs/cbi: properly escape values in dynlist widget (#79)
Diffstat (limited to 'libs')
| -rw-r--r-- | libs/cbi/luasrc/view/cbi/dynlist.htm | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libs/cbi/luasrc/view/cbi/dynlist.htm b/libs/cbi/luasrc/view/cbi/dynlist.htm index a23a4ebcdf..1f3b901410 100644 --- a/libs/cbi/luasrc/view/cbi/dynlist.htm +++ b/libs/cbi/luasrc/view/cbi/dynlist.htm @@ -18,7 +18,7 @@ $Id$ for i=1, #vals + 1 do local val = vals[i] %> - <input class="cbi-input-text" value="<%=val%>" onchange="cbi_d_update(this.id)" type="text"<%= attr("id", cbid .. "." .. i) .. attr("name", cbid) .. ifattr(self.size, "size")%> /> + <input class="cbi-input-text" value="<%=luci.util.pcdata(val)%>" onchange="cbi_d_update(this.id)" type="text"<%= attr("id", cbid .. "." .. i) .. attr("name", cbid) .. ifattr(self.size, "size")%> /> <% if i <= #vals then %> <input class="cbi-input-image" type="image" value="<%:cbi_del%>" name="cbi.rle.<%=section .. "." .. self.option .. "." .. i%>" alt="<%:cbi_del%>" title="<%:cbi_del%>" src="<%=resource%>/cbi/remove.gif" /> <% else %> |