From: Don Armstrong <don@donarmstrong.com>
Date: Wed, 6 Jan 2010 07:48:11 +0000 (-0800)
Subject:  * fix XSS in include_exclude_key
X-Git-Tag: release/2.6.0~429^2
X-Git-Url: https://git.donarmstrong.com/?p=debbugs.git;a=commitdiff_plain;h=667e3e419cece2faee67590aa88c2583c3032a43

 * fix XSS in include_exclude_key
---

diff --git a/templates/en_US/cgi/pkgreport_options_include_exclude_key.tmpl b/templates/en_US/cgi/pkgreport_options_include_exclude_key.tmpl
index da67c30..ab0a246 100644
--- a/templates/en_US/cgi/pkgreport_options_include_exclude_key.tmpl
+++ b/templates/en_US/cgi/pkgreport_options_include_exclude_key.tmpl
@@ -9,6 +9,6 @@
 			package    => 'with package',
                        ],$key1||'')}
 </select>
-<input type="text" name="_fo_{$incexc}value" value ="{$key2||''}">
+<input type="text" name="_fo_{$incexc}value" value ="{html_escape($key2)||''}">
 <!-- {$value_index} -->
 </nobr>