buildmaster/mysql-issues.php: html-encode the install_targets - they may contain <>...

1 files changed, 2 insertions, 2 deletions

diff --git a/buildmaster/mysql-issues.php b/buildmaster/mysql-issues.php
index 744f122..0c27608 100644
--- a/buildmaster/mysql-issues.php
+++ b/buildmaster/mysql-issues.php
@@ -94,7 +94,7 @@ require_once BASE . "/lib/mysql.php";
       print "    <font color=\"#00ff00\">(marked as to-be-deleted) ";
     else
       print "    <font color=\"#ff0000\">";
-    print $row["pkgfile"] . " depends on " . $row["install_target"] . " which is not provided by any package";
+    print $row["pkgfile"] . " depends on " . htmlspecialchars($row["install_target"]) . " which is not provided by any package";
     if (isset($row["subst_repository"]))
       print " - but can be replaced by the one in " . $row["subst_repository"];
     elseif (isset($row["subst_buildlist"]))
@@ -175,7 +175,7 @@ require_once BASE . "/lib/mysql.php";
       print "    <font color=\"#00ff00\">(marked as to-be-deleted) ";
     else
       print "    <font color=\"#800000\">";
-    print $row["pkgfile"] . " depends on " . $row["install_target"] . " which is not provided by any package installable from enabled " . $row["stability"] . " repositories.<br>";
+    print $row["pkgfile"] . " depends on " . htmlspecialchars($row["install_target"]) . " which is not provided by any package installable from enabled " . $row["stability"] . " repositories.<br>";
     print "</font>\n";
     unset($row);
   }