bugfix: avoid XSS in netdev ip forms (LMS #1910)

chilek · Jun 17, 2021 · 168355e · 168355e
1 parent 4600264
commit 168355e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/default/netdev/netdevipinfobox.html b/templates/default/netdev/netdevipinfobox.html
@@ -139,7 +139,7 @@
 									</td>
 									<td>
 										{if !ConfigHelper::checkConfig('phpui.protect_passwords')}
-											{$nodeipdata.passwd}
+											{$nodeipdata.passwd|escape}
 										{/if}
 										{button type="link" icon="clipboard" class="lms-ui-button-clipboard"
 											data_clipboard_text="{$nodeipdata.passwd|escape}"}