From a2b30e9fe9e1f8a5d8f6bb73e0ae89efaa94f620 Mon Sep 17 00:00:00 2001
From: Mcat12 <newtoncat12@yahoo.com>
Date: Fri, 19 Jan 2018 17:08:05 -0500
Subject: [PATCH] Sanitize debug text before sending

Signed-off-by: Mcat12 <newtoncat12@yahoo.com>
---
 scripts/pi-hole/php/debug.php | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/scripts/pi-hole/php/debug.php b/scripts/pi-hole/php/debug.php
index 39d5c8ea..27a23545 100644
--- a/scripts/pi-hole/php/debug.php
+++ b/scripts/pi-hole/php/debug.php
@@ -18,10 +18,12 @@ $token = isset($_GET["token"]) ? $_GET["token"] : "";
 check_csrf($token);
 
 function echoEvent($datatext) {
+    $data = htmlspecialchars($datatext);
+
     if(!isset($_GET["IE"]))
-      echo "data: ".implode("\ndata: ", explode("\n", $datatext))."\n\n";
+      echo "data: ".implode("\ndata: ", explode("\n", $data))."\n\n";
     else
-      echo $datatext;
+      echo $data;
 }
 
 if(isset($_GET["upload"]))