From 0199f3756b7cb1799b2dcc39ccf179f720b09dee Mon Sep 17 00:00:00 2001 From: FusionPBX Date: Sat, 10 Aug 2019 11:00:31 -0600 Subject: [PATCH] Update conference_interactive_inc.php --- app/conferences_active/conference_interactive_inc.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/conferences_active/conference_interactive_inc.php b/app/conferences_active/conference_interactive_inc.php index 9c507c06ad..5f1061d9a9 100644 --- a/app/conferences_active/conference_interactive_inc.php +++ b/app/conferences_active/conference_interactive_inc.php @@ -179,7 +179,7 @@ if (strlen($record_path) == 0) { if (permission_exists('conference_interactive_mute')) { $action_mute = ($flag_can_speak == "true") ? 'mute' : 'unmute'; - $td_onclick = "onclick=\"send_cmd('conference_exec.php?cmd=conference&name=".$conference_name."&data=".$action_mute."&id=".$id."');\""; + $td_onclick = "onclick=\"send_cmd('conference_exec.php?cmd=conference&name=".escape($conference_name)."&data=".$action_mute."&id=".escape($id)."');\""; $td_title = "title=\"".$text['message-click_to_'.$action_mute]."\""; } echo "\n";