X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=search.cgi;fp=search.cgi;h=e3eb882bcd27171a4898b46688b95da77bce033d;hb=f9609dae4f7fce6ca978c830f8e6311b7a94723c;hp=ff99da35e99c8fea32a45f736debfd4b19c743ac;hpb=b450e2760413a9fa7e5b6b37bf51b80d89f23e79;p=mirror%2Fuserdir-ldap-cgi.git

diff --git a/search.cgi b/search.cgi
index ff99da3..e3eb882 100755
--- a/search.cgi
+++ b/search.cgi
@@ -118,6 +118,9 @@ if (!$dosearch) {
   foreach $dn (sort {$entries->{$a}->{sn}->[0] <=> $entries->{$b}->{sn}->[0]} keys(%$entries)) {
     my $ok = 0;
     $data = $entries->{$dn};
+    for my $key (keys %{$data}) {
+      @{$data->{$key}} = map { CGI::escapeHTML($_); } @{$data->{$key}};
+    }
 
     # These are local variables.. i have enough global vars as it is... <sigh>
     my ($ufdn, $login, $name, $icquin, $jabberjid, $email, $fingerprint,