From 2f5826db3dba17b154ce8e6e6470bb29f72e5c4c Mon Sep 17 00:00:00 2001
From: FusionPBX <markjcrane@gmail.com>
Date: Thu, 28 Jun 2018 23:29:21 -0600
Subject: [PATCH] Update destinations.php

---
 resources/classes/destinations.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/resources/classes/destinations.php b/resources/classes/destinations.php
index 3ee916841d..f91c6fbab0 100644
--- a/resources/classes/destinations.php
+++ b/resources/classes/destinations.php
@@ -262,7 +262,7 @@ class destinations {
 					$select_label = trim($select_label);
 					if ($select_value == $destination_value) { $selected = "selected='selected' "; $select_found = true; } else { $selected = ''; }
 					if ($label2 == 'destinations') { $select_label = format_phone($select_label); }
-					$response .= "			<option value='".$select_value."' ".$selected.">".$select_label."</option>\n";
+					$response .= "			<option value='".escape($select_value)."' ".$selected.">".escape($select_label)."</option>\n";
 				}
 				$response .= "		</optgroup>\n";
 				unset($text);
@@ -273,7 +273,7 @@ class destinations {
 			$destination_label = str_replace("menu-exec-app", "", $destination_label);
 			$destination_label = str_replace("transfer", "", $destination_label);
 			$destination_label = str_replace("XML ".$_SESSION['domain_name'], "", $destination_label);
-			$response .= "			<option value='".$destination_value."' selected='selected'>".trim($destination_label)."</option>\n";
+			$response .= "			<option value='".escape($destination_value)."' selected='selected'>".escape(trim($destination_label))."</option>\n";
 		}
 		$response .= "	</select>\n";
 		if (if_group("superadmin")) {