From 8d98e14a7f6ec1dc0a62fa50c2cb5bb5e20afb1a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ermal=20Lu=E7i?= <eri@pfsense.org>
Date: Fri, 26 Feb 2010 16:04:05 +0000
Subject: Ticket #383. Escape special javascript characters. It would be wiser
 to prevent them from being used on certificate names.

---
 config/openvpn-client-export/vpn_openvpn_export.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'config/openvpn-client-export')

diff --git a/config/openvpn-client-export/vpn_openvpn_export.php b/config/openvpn-client-export/vpn_openvpn_export.php
index 2af4da59..95637c26 100755
--- a/config/openvpn-client-export/vpn_openvpn_export.php
+++ b/config/openvpn-client-export/vpn_openvpn_export.php
@@ -306,7 +306,7 @@ servers[<?=$sindex;?>][1][<?=$uindex;?>] = new Array();
 servers[<?=$sindex;?>][1][<?=$uindex;?>][0] = '<?=$user['uindex'];?>';
 servers[<?=$sindex;?>][1][<?=$uindex;?>][1] = '<?=$user['cindex'];?>';
 servers[<?=$sindex;?>][1][<?=$uindex;?>][2] = '<?=$user['name'];?>';
-servers[<?=$sindex;?>][1][<?=$uindex;?>][3] = '<?=$user['certname'];?>';
+servers[<?=$sindex;?>][1][<?=$uindex;?>][3] = '<?=str_replace("'", "\\'", $user['certname']);?>';
 <?		endforeach; ?>
 <?	endforeach; ?>
 
-- 
cgit v1.2.3