From 35c3a97cf70c7320eeec5b013ae2b6f3652a54fb Mon Sep 17 00:00:00 2001
From: bib0x <bib0x.github@bootsect.org>
Date: Wed, 10 May 2023 15:59:01 +0200
Subject: [PATCH] encode unstrusted user inputs on search field from history

---
 history.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/history.php b/history.php
index eadd054..7805d31 100644
--- a/history.php
+++ b/history.php
@@ -93,7 +93,7 @@ if ( isset($_GET['as']) ) {
                 <div class="box-body">
                   <form class="navbar-form navbar-left" role="search">
                   <div class="input-group">
-                  <input type="text" class="form-control menu-input" name="as" placeholder="Search AS" value="<?php echo $val_searchas; ?>">
+                  <input type="text" class="form-control menu-input" name="as" placeholder="Search AS" value="<?php echo htmlspecialchars($val_searchas); ?>">
                   <span class="input-group-btn">
                   <button type="submit" class="btn btn-flat button-input"><i class="fa fa-search"></i></button>
                   </span>