wlanap.cgi: Proper escape special characters in PSK

Message ID 20260220182921.11569-1-stefan.schantl@ipfire.org
State New
Headers
Series wlanap.cgi: Proper escape special characters in PSK |

Commit Message

Stefan Schantl 20 Feb 2026, 6:29 p.m. UTC
Otherwise a used quote leads to not proper display
the used PSK in the WUI.

Fixes #13920

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
---
 html/cgi-bin/wlanap.cgi | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
  

Patch

diff --git a/html/cgi-bin/wlanap.cgi b/html/cgi-bin/wlanap.cgi
index 0c5dad558..a02b58b6d 100644
--- a/html/cgi-bin/wlanap.cgi
+++ b/html/cgi-bin/wlanap.cgi
@@ -414,7 +414,7 @@  print <<END;
 			<tr>
 				<td>$Lang::tr{'wlanap psk'}</td>
 				<td>
-					<input type='text' name='PWD' value='$wlanapsettings{'PWD'}' />
+					<input type='text' name='PWD' value='@{[ &Header::escape($wlanapsettings{'PWD'}) ]}' />
 				</td>
 			</tr>