Project

General

Profile

« Previous | Next » 

Revision 392796a4

Added by Jim Pingle over 9 years ago

Encode parameters in shaper queues before display.

View differences:

etc/inc/shaper.inc
646 646
		$form .= "</td></tr>";
647 647
		$form .= "<tr><td valign=\"middle\" class=\"vncellreq\"><br /><span class=\"vexpl\">" . gettext("Name") . "</span></td>";
648 648
		$form .= "<td class=\"vncellreq\">";
649
		$form .= "<strong>".$this->GetQname()."</strong>";
649
		$form .= "<strong>".htmlspecialchars($this->GetQname())."</strong>";
650 650
		$form .= "</td></tr>";
651 651
		$form .= "<tr><td valign=\"middle\" class=\"vncellreq\">" . gettext("Scheduler Type ");
652 652
		$form .= "</td>";
......
681 681
		$form .= "<tr><td valign=\"middle\" class=\"vncellreq\">" . gettext("Bandwidth");
682 682
		$form .= "</td><td class=\"vncellreq\">";
683 683
		$form .= "<input type=\"text\" id=\"bandwidth\" name=\"bandwidth\" value=\"";
684
		$form .= $this->GetBandwidth() . "\" />";
684
		$form .= htmlspecialchars($this->GetBandwidth()) . "\" />";
685 685
		$form .= "<select id=\"bandwidthtype\" name=\"bandwidthtype\" class=\"formselect\">";
686 686
		$form .= "<option value=\"Kb\"";
687 687
		if ($this->GetBwscale() == "Kb")
......
704 704
		$form .= "<tr><td valign=\"middle\" class=\"vncellreq\">Queue Limit</td>";
705 705
		$form .= "<td class=\"vncellreq\">";
706 706
		$form .= "<input type=\"text\" id=\"qlimit\" name=\"qlimit\" value=\"";
707
		$form .= $this->GetQlimit();
707
		$form .= htmlspecialchars($this->GetQlimit());
708 708
		$form .= "\" />";
709 709
		$form .= "</td></tr>";
710 710
		$form .= "<tr><td valign=\"middle\" class=\"vncellreq\">TBR Size</td>";
711 711
		$form .= "<td class=\"vncellreq\">";
712 712
		$form .= "<br /><input type=\"text\" id=\"tbrconfig\" name=\"tbrconfig\" value=\"";
713
		$form .= $this->GetTbrConfig();
713
		$form .= htmlspecialchars($this->GetTbrConfig());
714 714
		$form .= "\" />";
715 715
		$form .= "<br /> <span class=\"vexpl\">";
716 716
		$form .= gettext("Adjusts the size, in bytes, of the token bucket regulator. "
......
718 718
		      .  "bandwidth are used to determine the size.");
719 719
		$form .= "</span></td></tr>";
720 720
		$form .= "<input type=\"hidden\" id=\"interface\" name=\"interface\"";
721
		$form .= " value=\"" . $this->GetInterface() . "\" />";
722
		$form .= "<input type=\"hidden\" id=\"name\" name=\"name\" value=\"".$this->GetQname()."\" />";
721
		$form .= " value=\"" . htmlspecialchars($this->GetInterface()) . "\" />";
722
		$form .= "<input type=\"hidden\" id=\"name\" name=\"name\" value=\"".htmlspecialchars($this->GetQname())."\" />";
723 723

  
724 724

  
725 725
		return $form;

Also available in: Unified diff