From fd7caf89edee1e42be4f0f394d78245916b37d16 Mon Sep 17 00:00:00 2001
From: FusionPBX <markjcrane@gmail.com>
Date: Fri, 31 Aug 2018 12:17:32 -0600
Subject: [PATCH] Update destinations.php

---
 app/destinations/destinations.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/destinations/destinations.php b/app/destinations/destinations.php
index 673d4f1da5..af706df98e 100644
--- a/app/destinations/destinations.php
+++ b/app/destinations/destinations.php
@@ -304,7 +304,7 @@
 	echo "		<td width='33.3%' align='center' nowrap='nowrap'>$paging_controls</td>\n";
 	echo "		<td class='list_control_icons'>";
 	if (permission_exists('destination_add')) {
-		echo 		"<a href='destination_edit.php?type=$destination_type' alt='".$text['button-add']."'>$v_link_label_add</a>";
+		echo 		"<a href='destination_edit.php?type=".escape($destination_type)."' alt='".$text['button-add']."'>$v_link_label_add</a>";
 	}
 	else {
 		echo 		"&nbsp;";