[BUGFIX] Fix XSS in admin pannel

Signed-off-by: Jerome Jutteau <mojo@couak.net>

diff --git a/lib/functions.php b/lib/functions.php
index 9fa0e5edd90a99de3d7a936250bf307afa3115aa..e23727413f7d4c35efb36c6479c852411d5c5142 100644 (file)
--- a/lib/functions.php
+++ b/lib/functions.php
@@ -553,13 +553,13 @@ function jirafeau_admin_list($name, $file_hash, $link_hash)
 {
     echo '<fieldset><legend>';
     if (!empty($name)) {
-        echo t('FILENAME') . ": $name ";
+        echo t('FILENAME') . ": " . jirafeau_escape($name);
     }
     if (!empty($file_hash)) {
-        echo t('FILE') . ": $file_hash ";
+        echo t('FILE') . ": " . jirafeau_escape($file_hash);
     }
     if (!empty($link_hash)) {
-        echo t('LINK') . ": $link_hash ";
+        echo t('LINK') . ": " . jirafeau_escape($link_hash);
     }
     if (empty($name) && empty($file_hash) && empty($link_hash)) {
         echo t('LS_FILES');