From d0a21b4859b160245c54ea732e6ee96fa7b5a246 Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Mon, 26 Jul 2021 17:08:17 +0300
Subject: [PATCH] Ensure HTML will not be displayed in list log page

---
 web/templates/admin/list_log.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/templates/admin/list_log.html b/web/templates/admin/list_log.html
index 34a676c6a..9713b34b0 100644
--- a/web/templates/admin/list_log.html
+++ b/web/templates/admin/list_log.html
@@ -53,7 +53,7 @@
         <!-- /.l-unit__col -->
         <div class="l-unit__col l-unit__col--right">
           <div class="l-unit__name small">
-            <?=$data[$key]['CMD']?>
+          <?=htmlspecialchars($data[$key]['CMD'], ENT_QUOTES)?>
           </div>
 
           <!-- div class="l-unit__stats">