From a7562a76590b0069aa5441b6ba7bed87db1b292d Mon Sep 17 00:00:00 2001
From: Brady Miller <brady.g.miller@gmail.com>
Date: Tue, 16 Jan 2018 02:42:40 -0800
Subject: [PATCH] security fix (#1388)

---
 gacl/admin/templates/phpgacl/object_search.tpl | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/gacl/admin/templates/phpgacl/object_search.tpl b/gacl/admin/templates/phpgacl/object_search.tpl
index f33915681..199207cf6 100644
--- a/gacl/admin/templates/phpgacl/object_search.tpl
+++ b/gacl/admin/templates/phpgacl/object_search.tpl
@@ -1,4 +1,4 @@
-{include file="phpgacl/header.tpl"} 
+{include file="phpgacl/header.tpl"}
     <style type="text/css">
     {literal}
     input.search {
@@ -18,15 +18,15 @@
       <table cellpadding="2" cellspacing="2" border="2" width="100%">
         <tbody>
           <tr>
-            <th colspan="2">{$object_type_name} > {$section_value_name}</th>
+            <th colspan="2">{$object_type_name|escape:'html'} > {$section_value_name|escape:'html'}</th>
           </tr>
           <tr>
             <td width="25%"><b>Name:</b></td>
-            <td width="75%"><input type="text" class="search" name="name_search_str" value="{$name_search_str}" /></td>
+            <td width="75%"><input type="text" class="search" name="name_search_str" value="{$name_search_str|escape:'html'}" /></td>
           </tr>
           <tr>
 			<td><b>Value:</b></td>
-			<td><input type="text" class="search" name="value_search_str" value="{$value_search_str}" /></td>
+			<td><input type="text" class="search" name="value_search_str" value="{$value_search_str|escape:'html'}" /></td>
 		  </tr>
 		  <tr class="controls" align="center">
 		  	<td colspan="2"><input type="submit" class="button" name="action" value="Search" /> <input type="button" class="button" name="action" value="Close" onClick="window.close();" /></td>
@@ -38,7 +38,7 @@
       <table cellpadding="2" cellspacing="2" border="2" width="100%">
         <tbody>
           <tr>
-            <th colspan="2">{$total_rows} Objects Found</th>
+            <th colspan="2">{$total_rows|escape:'html'} Objects Found</th>
           </tr>
 		{if ($total_rows > 0)}
           <tr valign="middle" align="center">
@@ -48,15 +48,15 @@
 			  </select>
             </td>
             <td width="10%">
-				<input type="button" class="select" name="select" value="&nbsp;&gt;&gt;&nbsp;" onClick="opener.select_item(opener.document.forms['{$src_form}'].elements['{$object_type}_section'], this.form.elements['objects'], opener.document.forms['{$src_form}'].elements['selected_{$object_type}[]']);">
+				<input type="button" class="select" name="select" value="&nbsp;&gt;&gt;&nbsp;" onClick="opener.select_item(opener.document.forms['{$src_form|escape:'html'}'].elements['{$object_type|escape:'html'}_section'], this.form.elements['objects'], opener.document.forms['{$src_form|escape:'html'}'].elements['selected_{$object_type|escape:'html'}[]']);">
              </td>
           </tr>
 		{/if}
         </tbody>
       </table>
 {/if}
-	<input type="hidden" name="src_form" value="{$src_form}">
-	<input type="hidden" name="object_type" value="{$object_type}">	
-	<input type="hidden" name="section_value" value="{$section_value}">
+	<input type="hidden" name="src_form" value="{$src_form|escape:'html'}">
+	<input type="hidden" name="object_type" value="{$object_type|escape:'html'}">
+	<input type="hidden" name="section_value" value="{$section_value|escape:'html'}">
   </form>
 {include file="phpgacl/footer.tpl"}
\ No newline at end of file
-- 
2.11.4.GIT