From 8f5047cb20247dd8f41d4ec0ee65a6e324a3f574 Mon Sep 17 00:00:00 2001
From: Christian Boltz <postfixadmin@cboltz.de>
Date: Tue, 10 Jan 2012 19:39:29 +0000
Subject: [PATCH] templates/admin_create-domain.php: - fix XSS in domain and
 description field   (Thanks to Filippo Cavallarin!)

git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/branches/postfixadmin-2.3@1323 a1433add-5e2c-0410-b055-b7f2511e0802
---
 templates/admin_create-domain.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/templates/admin_create-domain.php b/templates/admin_create-domain.php
index b68161db..5b7cab7f 100644
--- a/templates/admin_create-domain.php
+++ b/templates/admin_create-domain.php
@@ -7,12 +7,12 @@
    </tr>
    <tr>
       <td><?php print $PALANG['pAdminCreate_domain_domain'] . ":"; ?></td>
-      <td><input class="flat" type="text" name="fDomain" value="<?php print $tDomain; ?>" /></td>
+      <td><input class="flat" type="text" name="fDomain" value="<?php print htmlentities($tDomain); ?>" /></td>
       <td><?php print $pAdminCreate_domain_domain_text; ?></td>
    </tr>
    <tr>
       <td><?php print $PALANG['pAdminCreate_domain_description'] . ":"; ?></td>
-      <td><input class="flat" type="text" name="fDescription" value="<?php print $tDescription; ?>" /></td>
+      <td><input class="flat" type="text" name="fDescription" value="<?php print htmlentities($tDescription); ?>" /></td>
       <td>&nbsp;</td>
    </tr>
    <tr>