From 472254f10a33b54fbc24fbb14af16c3d4cd64946 Mon Sep 17 00:00:00 2001 From: AlexanderDCrane <40072887+AlexanderDCrane@users.noreply.github.com> Date: Fri, 31 Aug 2018 14:08:44 -0600 Subject: [PATCH] Update call_edit.php (#3390) --- app/calls/call_edit.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/app/calls/call_edit.php b/app/calls/call_edit.php index 315cacbb36..6f68b06ea4 100644 --- a/app/calls/call_edit.php +++ b/app/calls/call_edit.php @@ -446,10 +446,10 @@ $result = $prep_statement->fetchAll(PDO::FETCH_NAMED); foreach ($result as &$row) { if (strlen($number_alias) == 0) { - echo " \"".$row["extension"]."\",\n"; + echo " \"".escape($row["extension"])."\",\n"; } else { - echo " \"".$row["number_alias"]."\",\n"; + echo " \"".escape($row["number_alias"])."\",\n"; } } echo " ];\n";