From 61c90350743f095e8f0e151296f5d1b4d81e722c Mon Sep 17 00:00:00 2001
From: Neil Lathwood <neil@lathwood.co.uk>
Date: Sun, 21 Jan 2018 04:26:31 +0000
Subject: [PATCH] fix: Handle escaping output within bootgrid form (#8108)

---
 html/pages/ports.inc.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/html/pages/ports.inc.php b/html/pages/ports.inc.php
index 5e3422a461..3e57bc6ac7 100644
--- a/html/pages/ports.inc.php
+++ b/html/pages/ports.inc.php
@@ -200,7 +200,7 @@ if ((isset($vars['searchbar']) && $vars['searchbar'] != "hide") || !isset($vars[
             } else {
                 $dataselected = "";
             }
-            $output .= "<option value='" . $data['ifType'] . "' " . $dataselected . ">" . $data['ifType'] . "</option>";
+            $output .= "<option value='" . clean_bootgrid($data['ifType']) . "' " . $dataselected . ">" . clean_bootgrid($data['ifType']) . "</option>";
         }
     }
 
@@ -223,7 +223,7 @@ if ((isset($vars['searchbar']) && $vars['searchbar'] != "hide") || !isset($vars[
             } else {
                 $portdescrib = "";
             }
-            $output .= "<option value='" . $data['port_descr_type'] . "' " . $portdescrib . ">" . ucfirst(display($data['port_descr_type'])) . "</option>";
+            $output .= "<option value='" . clean_bootgrid($data['port_descr_type']) . "' " . $portdescrib . ">" . ucfirst(clean_bootgrid($data['port_descr_type'])) . "</option>";
         }
     }
 
@@ -252,7 +252,7 @@ if ((isset($vars['searchbar']) && $vars['searchbar'] != "hide") || !isset($vars[
                 $locationselected = "";
             }
             $ui_location = strlen($location) > 15 ? substr($location, 0, 15) . "..." : $location;
-            $output .= "<option value='" . $location . "' " . $locationselected . ">" . $ui_location . "</option>";
+            $output .= "<option value='" . clean_bootgrid($location) . "' " . $locationselected . ">" . clean_bootgrid($ui_location) . "</option>";
         }
     }