From 2430b5f6a6e36be923e552797d8b33d13658de29 Mon Sep 17 00:00:00 2001
From: psychon <psychon@726aef4b-f618-498e-8847-2d620e286838>
Date: Sun, 22 Feb 2009 15:22:37 +0000
Subject: [PATCH] Fix some minor XSS bug in webadmin's default skin

For some reason it didn't escape module descriptions...


git-svn-id: https://znc.svn.sourceforge.net/svnroot/znc/trunk@1391 726aef4b-f618-498e-8847-2d620e286838
---
 modules/webadmin/skins/default/Settings.tmpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/webadmin/skins/default/Settings.tmpl b/modules/webadmin/skins/default/Settings.tmpl
index c5ec673d..d1f2d66e 100644
--- a/modules/webadmin/skins/default/Settings.tmpl
+++ b/modules/webadmin/skins/default/Settings.tmpl
@@ -101,7 +101,7 @@
 					<tr class="background: <? IF __EVEN__ ?>evenrow<? ELSE ?>oddrow<? ENDIF ?>">
 						<td><input type="checkbox" name="loadmod" id="lm_<? VAR Name ESC=HTML ?>" value="<? VAR Name ESC=HTML ?>"<? IF Checked ?> checked="checked"<? ENDIF ?><? IF Disabled ?> disabled="disabled"<? ENDIF ?> /><label for="lm_<? VAR Name ESC=HTML ?>"> <? VAR Name ESC=HTML ?></label></td>
 						<td><input type="text" name="modargs_<? VAR Name ESC=HTML ?>" value="<? VAR Args ESC=HTML ?>" /></td>
-						<td><? VAR Description ?></td>
+						<td><? VAR Description ESC=HTML ?></td>
 					</tr>
 					<? ENDLOOP ?>
 				</table>