run cmd of converters through htmlspecialchars()

This commit is contained in:
Uwe Steinmann 2014-01-06 22:09:08 +01:00
parent 7369aa2879
commit 0ad0410404

View File

@ -516,7 +516,7 @@ if(!is_writeable($settings->_configFilePath)) {
?>
<tr title="<?php echo $mimetype;?>">
<td><?php echo $mimetype;?>:</td>
<td><input type="text" name="converters[<?php echo $mimetype;?>]" value="<?php echo $cmd ?>" size="100" /></td>
<td><input type="text" name="converters[<?php echo $mimetype;?>]" value="<?php echo htmlspecialchars($cmd) ?>" size="100" /></td>
</tr>
<?php
}