Sanitize text of preferences strings

diff --git a/webcit/preferences.c b/webcit/preferences.c
index 2c761b05c358c32fa685bb976d671b7858f2ce5e..48db2583294fd89d9557a61eb9947bafee77da77 100644 (file)
--- a/webcit/preferences.c
+++ b/webcit/preferences.c
@@ -377,7 +377,9 @@ void display_preferences(void)
        wprintf("<tr><td>");
        wprintf(_("Default character set for email headers:"));
        wprintf("</td><td>");
-       wprintf("<input type=\"text\" NAME=\"default_header_charset\" MAXLENGTH=\"32\" VALUE=\"%s\">", buf);
+       wprintf("<input type=\"text\" NAME=\"default_header_charset\" MAXLENGTH=\"32\" VALUE=\"");
+       escputs(buf);
+       wprintf("\">");
        wprintf("</td></tr>");
 
        /** submit buttons */