Fix to correctly escape HTML in editor mode

webmin/webmin@f0f8dc2
webmin · Sep 16, 2023 · 8211f7a · 8211f7a
1 parent eae7981
commit 8211f7a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/authentic.pl b/authentic.pl
@@ -867,7 +867,7 @@ sub theme_ui_textarea
     return "<textarea style='display: inline; width:100%;' class='form-control ui_textarea' " .
       "name=\"" . &quote_escape($name) . "\" " . "id=\"" . &quote_escape($name . $ids) .
       "\" " . "rows='$rows' cols='$cols'" . ($wrap ? " wrap=$wrap" : "") . ($dis ? " disabled=true" : "") .
-      ($tags ? " $tags" : "") . ">" . &html_escape($value) . "</textarea>";
+      ($tags ? " $tags" : "") . ">" . &html_escape($value, 1) . "</textarea>";
 }
 
 sub theme_ui_submit