[checkmk-commits] Also escape service levels (and other custom vars) in status GUI

Module: check_mk Branch: master Commit: 9392a8e4f26a38f8306033dbfe08edbc729503a8 URL: http://git.mathias-kettner.de/git/?p=check_mk.git;a=commit;h=9392a8e4f26a38… Author: Lars Michelsen <lm(a)mathias-kettner.de> Date: Wed Jan 10 16:24:24 2018 +0100 Also escape service levels (and other custom vars) in status GUI Change-Id: I59aca47895fb8fe040ea0c6e7ec35aad2a729780 --- web/plugins/views/painters.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/web/plugins/views/painters.py b/web/plugins/views/painters.py index ad3ffd4..1d44d64 100644 --- a/web/plugins/views/painters.py +++ b/web/plugins/views/painters.py @@ -155,7 +155,7 @@ def paint_custom_var(what, key, row, choices=None): custom_val = custom_vars[key] if choices: custom_val = dict(choices).get(int(custom_val), custom_val) - return key, custom_val + return key, html.attrencode(custom_val) return key, ""