summaryrefslogtreecommitdiffstats
path: root/fetchmail-startstop-html.lsp
diff options
context:
space:
mode:
Diffstat (limited to 'fetchmail-startstop-html.lsp')
-rw-r--r--fetchmail-startstop-html.lsp6
1 files changed, 3 insertions, 3 deletions
diff --git a/fetchmail-startstop-html.lsp b/fetchmail-startstop-html.lsp
index bd4c275..48ca35d 100644
--- a/fetchmail-startstop-html.lsp
+++ b/fetchmail-startstop-html.lsp
@@ -2,7 +2,7 @@
<H1>Management</H1>
<DL>
-<form action="<%= page_info.script .. page_info.prefix .. page_info.controller .. "/" .. page_info.action %>" method="POST">
+<form action="<%= html.html_escape(page_info.script .. page_info.prefix .. page_info.controller .. "/" .. page_info.action) %>" method="POST">
<DT>Program control-panel</DT>
<DD>
<input class="submit" type="submit" name="action" value="Start" <% if data.value.status.value== "Running" then io.write("disabled") end %>>
@@ -23,9 +23,9 @@
<DT>Previous action result</DT>
<DD>
<% if data.value.result.value ~= "" then %>
-<P CLASS='descr'><%= string.gsub(data.value.result.value, "\n", "<BR>") %></P>
+<P CLASS='descr'><%= string.gsub(html.html_escape(data.value.result.value), "\n", "<BR>") %></P>
<% end if data.value.result.errtxt then %>
-<P CLASS='error'><%= string.gsub(data.value.result.errtxt, "\n", "<BR>") %></P>
+<P CLASS='error'><%= string.gsub(html.html_escape(data.value.result.errtxt), "\n", "<BR>") %></P>
<% end end %>
</DD>
</DL>