From 4082765c659b5ad8a8cd6863f017d587aff10aef Mon Sep 17 00:00:00 2001
From: Serghey Rodin <serghey.rodin@gmail.com>
Date: Tue, 20 Aug 2013 14:22:33 +0300
Subject: [PATCH] xss protection

---
 web/templates/admin/list_cron.html | 2 +-
 web/templates/user/list_cron.html  | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/web/templates/admin/list_cron.html b/web/templates/admin/list_cron.html
index 58643e2d7..739b1bc4f 100644
--- a/web/templates/admin/list_cron.html
+++ b/web/templates/admin/list_cron.html
@@ -81,7 +81,7 @@
                         <table class="data-col2" width="800px">
                             <tr>
                                 <td colspan=5 class="cron" style="padding: 0 0 0 4px;">
-                                    <b><?php echo $data[$key]['CMD'] ?></b>
+                                    <b><?php echo htmlspecialchars($data[$key]['CMD'], ENT_NOQUOTES) ?></b>
                                 </td>
                             </tr>
                             <tr>
diff --git a/web/templates/user/list_cron.html b/web/templates/user/list_cron.html
index 8cc02ebe4..d93266377 100644
--- a/web/templates/user/list_cron.html
+++ b/web/templates/user/list_cron.html
@@ -67,7 +67,7 @@
                         <table class="data-col2" width="800px">
                             <tr>
                                 <td colspan=5 class="cron" style="padding: 0 0 0 4px;">
-                                    <b><?php echo $data[$key]['CMD'] ?></b>
+                                    <b><?php echo htmlspecialchars($data[$key]['CMD'], ENT_NOQUOTES) ?></b>
                                 </td>
                             </tr>
                             <tr>