From: Michael Tremer <michael.tremer@ipfire.org>
Date: Thu, 25 Sep 2025 15:07:36 +0000 (+0200)
Subject: ids.cgi: Escape the remark before sending it back to the browser
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=43ce8d752e79453e99fccb33bd8a4176bba4c670;p=ipfire-2.x.git

ids.cgi: Escape the remark before sending it back to the browser

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/html/cgi-bin/ids.cgi b/html/cgi-bin/ids.cgi
index 9c6b393f6..9685b37d0 100644
--- a/html/cgi-bin/ids.cgi
+++ b/html/cgi-bin/ids.cgi
@@ -105,7 +105,7 @@ if (($cgiparams{'WHITELIST'} eq $Lang::tr{'add'}) || ($cgiparams{'WHITELIST'} eq
 
 		# Assign hash values.
 		my $new_entry_address = $cgiparams{'IGNORE_ENTRY_ADDRESS'};
-		my $new_entry_remark = &Header::escape($cgiparams{'IGNORE_ENTRY_REMARK'});
+		my $new_entry_remark = $cgiparams{'IGNORE_ENTRY_REMARK'};
 
 		# Read-in ignoredfile.
 		&General::readhasharray($IDS::ignored_file, \%ignored) if (-e $IDS::ignored_file);
@@ -1525,7 +1525,8 @@ print <<END;
 				<tr>
 					<td>$Lang::tr{'remark'}</td>
 					<td>
-						<input type='text' name=IGNORE_ENTRY_REMARK value='$entry_remark' size='24' />
+						<input type='text' name=IGNORE_ENTRY_REMARK
+							value='@{[ &Header::escape($entry_remark) ]}' size='24' />
 					</td>
 				</tr>