From 3a2593002f089495e224add57158f2949546a70b Mon Sep 17 00:00:00 2001
From: FusionPBX <markjcrane@gmail.com>
Date: Wed, 30 Aug 2023 12:52:54 -0600
Subject: [PATCH] Sanitize the application data

---
 app/destinations/destination_edit.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/destinations/destination_edit.php b/app/destinations/destination_edit.php
index 0f36db13ac..d0a6c75687 100644
--- a/app/destinations/destination_edit.php
+++ b/app/destinations/destination_edit.php
@@ -537,7 +537,7 @@
 								$action_array = explode(":", $destination_action, 2);
 								if (isset($action_array[0]) && !empty($action_array[0])) {
 									if ($destination->valid($action_array[0].':'.$action_array[1])) {
-										$dialplan["dialplan_xml"] .= "		<action application=\"".xml::sanitize($action_array[0])."\" data=\"".$action_array[1]."\"/>\n";
+										$dialplan["dialplan_xml"] .= "		<action application=\"".xml::sanitize($action_array[0])."\" data=\"".xml::sanitize($action_array[1])."\"/>\n";
 									}
 								}
 							}