From 6422e7fd722489d0bc537ced793f7769fef7bcfc Mon Sep 17 00:00:00 2001
From: FusionPBX <markjcrane@gmail.com>
Date: Sun, 16 Jun 2019 15:04:43 -0600
Subject: [PATCH] Update conference_interactive_inc.php

---
 app/conferences_active/conference_interactive_inc.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/conferences_active/conference_interactive_inc.php b/app/conferences_active/conference_interactive_inc.php
index c74faca9d8..bc677f52da 100644
--- a/app/conferences_active/conference_interactive_inc.php
+++ b/app/conferences_active/conference_interactive_inc.php
@@ -128,7 +128,7 @@
 
 		if (permission_exists('conference_interactive_lock')) {
 			$action_locked = ($locked == "true") ? 'unlock' : 'lock';
-			echo "	<input type='button' class='btn' onclick=\"send_cmd('conference_exec.php?cmd=conference&name=".$conference_name."&data=".$action_locked."');\" value='".$text['label-'.$action_locked]."'>\n";
+			echo "	<input type='button' class='btn' onclick=\"send_cmd('conference_exec.php?cmd=conference&name=".escape($conference_name)."&data=".$action_locked."');\" value='".$text['label-'.$action_locked]."'>\n";
 		}
 		if (permission_exists('conference_interactive_mute')) {
 			$action_mute_all = ($mute_all == "true") ? 'unmute' : 'mute';