Fix textarea by using htmlspecialchars

This commit is contained in:
FusionPBX
2025-04-11 10:53:03 -06:00
committed by GitHub
parent 9612d41b5d
commit 8e3f2ba285

View File

@@ -440,7 +440,7 @@
echo " ".$text['label-message']."\n";
echo "</td>\n";
echo "<td class='vtable' align='left'>\n";
echo " <textarea class='formfld' name='recording_message' style='width: 300px; height: 150px;'>".escape($recording_message)."</textarea>\n";
echo " <textarea class='formfld' name='recording_message' style='width: 300px; height: 150px;'>".htmlspecialchars($recording_message, ENT_QUOTES, 'UTF-8')."</textarea>\n";
echo "<br />\n";
echo $text['description-message']."\n";
echo "</td>\n";