From 9af9c4dcb23913820888a0ce7e658bffa97fa1cc Mon Sep 17 00:00:00 2001
From: Ben Roberts <ben@sihnon.net>
Date: Wed, 21 Dec 2011 02:14:28 +0000
Subject: [PATCH] Sanitise outputs

---
 source/webui/templates/index.tpl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/source/webui/templates/index.tpl b/source/webui/templates/index.tpl
index 674cfdd..96d1530 100644
--- a/source/webui/templates/index.tpl
+++ b/source/webui/templates/index.tpl
@@ -45,11 +45,11 @@
                                 {if is_array($message)}
                                     {$severity=$message['severity']}
                                     <div class="alert-message {$severity}">
-                                        {$message['content']}
+                                        {$message['content']|escape:html}
                                     </div>
                                 {else}
                                     <div class="alert-message info">
-                                        {$message}
+                                        {$message|escape:html}
                                     </div>
                                 {/if}
                             {/foreach}