From 6218d16e392231da10b8a324770d4ec850021a00 Mon Sep 17 00:00:00 2001
From: "mike.morgan%oregonstate.edu"
 <mike.morgan%oregonstate.edu@18797224-902f-48f8-a5cc-f745e15eee43>
Date: Thu, 2 Nov 2006 20:04:54 +0000
Subject: [PATCH] Added htmlspecialchars() to debug output for AMO update
 script.  See bug 357812.

git-svn-id: svn://10.0.0.236/trunk@214625 18797224-902f-48f8-a5cc-f745e15eee43
---
 mozilla/webtools/addons/public/htdocs/update.php | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/mozilla/webtools/addons/public/htdocs/update.php b/mozilla/webtools/addons/public/htdocs/update.php
index 9bf5f1d3e35..0e19515faed 100644
--- a/mozilla/webtools/addons/public/htdocs/update.php
+++ b/mozilla/webtools/addons/public/htdocs/update.php
@@ -155,27 +155,27 @@ if ($debug == true) {
 
     echo '<h1>Parameters</h1>';
     echo '<pre>';
-    print_r($_GET);
+    htmlspecialchars(print_r($_GET));
     echo '</pre>';
 
     if (!empty($query)) {
         echo '<h1>Query</h1>';
         echo '<pre>';
-        echo $query;
+        echo htmlspecialchars($query);
         echo '</pre>';
     }
 
     if (!empty($update)) {
         echo '<h1>Result</h1>';
         echo '<pre>';
-        print_r($update);
+        htmlspecialchars(print_r($update));
         echo '</pre>';
     }
 
     if (!empty($errors) && is_array($errors)) {
         echo '<h1>Errors Found</h1>';
         echo '<pre>';
-        print_r($errors);
+        htmlspecialchars(print_r($errors));
         echo '</pre>';
     } else {
         echo '<h1>No Errors Found</h1>';