From c89892e549d1281348adda7a9f0f6536d0a36e5c Mon Sep 17 00:00:00 2001
From: Art Cancro <ajc@citadel.org>
Date: Thu, 5 Jul 2007 15:44:29 +0000
Subject: [PATCH] Sanitize text of preferences strings

---
 webcit/preferences.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/webcit/preferences.c b/webcit/preferences.c
index 2c761b05c..48db25832 100644
--- a/webcit/preferences.c
+++ b/webcit/preferences.c
@@ -377,7 +377,9 @@ void display_preferences(void)
 	wprintf("<tr><td>");
 	wprintf(_("Default character set for email headers:"));
 	wprintf("</td><td>");
-	wprintf("<input type=\"text\" NAME=\"default_header_charset\" MAXLENGTH=\"32\" VALUE=\"%s\">", buf);
+	wprintf("<input type=\"text\" NAME=\"default_header_charset\" MAXLENGTH=\"32\" VALUE=\"");
+	escputs(buf);
+	wprintf("\">");
 	wprintf("</td></tr>");
 
 	/** submit buttons */
-- 
2.39.2