From c4fd21aaa989abca9248647415b177e4a32decaa Mon Sep 17 00:00:00 2001
From: AlexanderDCrane <40072887+AlexanderDCrane@users.noreply.github.com>
Date: Sat, 9 Jun 2018 13:20:00 -0600
Subject: [PATCH] Escape user data on destination_edit.php (#3109)
---
app/destinations/destination_edit.php | 38 +++++++++++++--------------
1 file changed, 19 insertions(+), 19 deletions(-)
diff --git a/app/destinations/destination_edit.php b/app/destinations/destination_edit.php
index be5e2ef04e..4fa5f08040 100644
--- a/app/destinations/destination_edit.php
+++ b/app/destinations/destination_edit.php
@@ -791,7 +791,7 @@
echo "| ".$text['header-destination-edit']." | \n";
}
echo "";
- echo " ";
+ echo " ";
echo " \n";
echo " | \n";
echo "\n";
@@ -825,7 +825,7 @@
echo " ".$text['label-destination_number']."\n";
echo "\n";
echo "\n";
- echo " \n";
+ echo " \n";
echo "
\n";
echo $text['description-destination_number']."\n";
echo " | \n";
@@ -837,7 +837,7 @@
echo " ".$text['label-destination_caller_id_name']."\n";
echo "\n";
echo "\n";
- echo " \n";
+ echo " \n";
echo "
\n";
echo $text['description-destination_caller_id_name']."\n";
echo " | \n";
@@ -848,7 +848,7 @@
echo " ".$text['label-destination_caller_id_number']."\n";
echo "\n";
echo "\n";
- echo " \n";
+ echo " \n";
echo "
\n";
echo $text['description-destination_caller_id_number']."\n";
echo " | \n";
@@ -860,7 +860,7 @@
echo " ".$text['label-destination_context']."\n";
echo "\n";
echo "\n";
- echo " \n";
+ echo " \n";
echo "
\n";
echo $text['description-destination_context']."\n";
echo " | \n";
@@ -896,9 +896,9 @@
echo " \n";
echo " | \n";
if (strlen($row['dialplan_detail_uuid']) > 0) {
- echo " \n";
+ echo " \n";
}
- echo " \n";
+ echo " \n";
echo " \n";
$data = $row['dialplan_detail_data'];
$label = explode("XML", $data);
@@ -908,7 +908,7 @@
echo " | \n";
echo " ";
if (strlen($row['destination_uuid']) > 0) {
- echo "".$v_link_label_delete."\n";
+ echo " ".$v_link_label_delete."\n";
}
echo " | \n";
echo "
\n";
@@ -939,10 +939,10 @@
echo " \n";
foreach ($result as &$row) {
if ($row["fax_uuid"] == $fax_uuid) {
- echo " \n";
+ echo " \n";
}
else {
- echo " \n";
+ echo " \n";
}
}
echo " \n";
@@ -958,7 +958,7 @@
echo " ".$text['label-destination_cid_name_prefix']."\n";
echo "\n";
echo "\n";
- echo " \n";
+ echo " \n";
echo "
\n";
echo $text['description-destination_cid_name_prefix']."\n";
echo " | \n";
@@ -993,7 +993,7 @@
echo " ".$text['label-account_code']."\n";
echo "\n";
echo "\n";
- echo " \n";
+ echo " \n";
echo "
\n";
echo $text['description-account_code']."\n";
echo " | \n";
@@ -1013,10 +1013,10 @@
}
foreach ($_SESSION['domains'] as $row) {
if ($row['domain_uuid'] == $domain_uuid) {
- echo " \n";
+ echo " \n";
}
else {
- echo " \n";
+ echo " \n";
}
}
echo " \n";
@@ -1026,7 +1026,7 @@
echo "\n";
}
else {
- echo "\n";
+ echo "\n";
}
echo "\n";
@@ -1053,7 +1053,7 @@
echo " ".$text['label-destination_description']."\n";
echo "\n";
echo "\n";
- echo " \n";
+ echo " \n";
echo "
\n";
echo $text['description-destination_description']."\n";
echo " | \n";
@@ -1061,9 +1061,9 @@
echo "
\n";
echo " \n";
if ($action == "update") {
- echo " \n";
- echo " \n";
- echo " \n";
+ echo " \n";
+ echo " \n";
+ echo " \n";
}
echo "
";
echo " \n";
|