From 5e0f520add6e48b7ddb435b53fdb9b16addf6328 Mon Sep 17 00:00:00 2001
From: AlexanderDCrane <40072887+AlexanderDCrane@users.noreply.github.com>
Date: Fri, 31 Aug 2018 14:33:17 -0600
Subject: [PATCH] Update fax_send.php (#3392)

---
 app/fax/fax_send.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/fax/fax_send.php b/app/fax/fax_send.php
index 05595177f2..c050430a90 100644
--- a/app/fax/fax_send.php
+++ b/app/fax/fax_send.php
@@ -985,7 +985,7 @@ if (!$included) {
 			echo "	<select class='formfld' style='display: none;' id='fax_recipient_select' onchange='contact_load(this);'>\n";
 			echo "		<option value=''></option>\n";
 			foreach ($contact_labels as $index => $contact_label) {
-				echo "	<option value=\"".$contact_values[$index]."\">".$contact_label."</option>\n";
+				echo "	<option value=\"".escape($contact_values[$index])."\">".escape($contact_label)."</option>\n";
 			}
 			echo "	</select>\n";
 		}