From 9c98d044f1863f5a14a8475465939b14d7c386f7 Mon Sep 17 00:00:00 2001
From: root <root@www.cacert.org>
Date: Wed, 28 Mar 2007 17:16:33 +0000
Subject: [PATCH] Fixed XSS exploit #8 from ascii

---
 tverify/index/0.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tverify/index/0.php b/tverify/index/0.php
index bf9ec58..cbdcac9 100644
--- a/tverify/index/0.php
+++ b/tverify/index/0.php
@@ -70,7 +70,7 @@
   </tr>
   <tr>
     <td class="DataTD" width="125"><?=_("Notary URL")?>: </td>
-    <td class="DataTD" width="125"><input type="text" name="notaryURL" value="<?=$_POST['notaryURL']?>"></td>
+    <td class="DataTD" width="125"><input type="text" name="notaryURL" value="<?=htmlentities($_POST['notaryURL'])?>"></td>
   </tr>
   <tr>
     <td class="DataTD" width="125"><?=_("Photo ID")?>: </td>