From 649b83a6d1a002998112ac91aa72dbae2449f753 Mon Sep 17 00:00:00 2001
From: mdtrooper <tres.14159@gmail.com>
Date: Wed, 15 Dec 2010 13:04:43 +0000
Subject: [PATCH] 2010-12-15  Miguel de Dios  <miguel.dedios@artica.es>

	* include/functions_html.php, include/ajax/module.php: fixed when the module
	have a scape html chars.



git-svn-id: https://svn.code.sf.net/p/pandora/code/trunk@3658 c3f86ba8-e40f-0410-aaad-9ba5e7f4b01f
---
 pandora_console/ChangeLog                  |  5 +++++
 pandora_console/include/ajax/module.php    |  2 +-
 pandora_console/include/functions_html.php | 10 +++++++++-
 3 files changed, 15 insertions(+), 2 deletions(-)

diff --git a/pandora_console/ChangeLog b/pandora_console/ChangeLog
index f8fdf3594d..2cfda6f6c4 100644
--- a/pandora_console/ChangeLog
+++ b/pandora_console/ChangeLog
@@ -1,3 +1,8 @@
+2010-12-15  Miguel de Dios  <miguel.dedios@artica.es>
+	
+	* include/functions_html.php, include/ajax/module.php: fixed when the module
+	have a scape html chars.
+
 2010-12-03  Sergio Martin <sergio.martin@artica.es>
 
 	* operation/search_agents.php: Fixed alert fired number of modules
diff --git a/pandora_console/include/ajax/module.php b/pandora_console/include/ajax/module.php
index 3fb9aabd62..ea72407b21 100644
--- a/pandora_console/include/ajax/module.php
+++ b/pandora_console/include/ajax/module.php
@@ -27,7 +27,7 @@ if ($search_modules) {
 	$modules = array_unique($modules);
 	
 	foreach ($modules as $module) {
-		echo $module . "\n";
+		echo safe_output($module) . "\n";
 	}
 }
 ?>
\ No newline at end of file
diff --git a/pandora_console/include/functions_html.php b/pandora_console/include/functions_html.php
index b30025ba3e..27c13429e2 100644
--- a/pandora_console/include/functions_html.php
+++ b/pandora_console/include/functions_html.php
@@ -1310,6 +1310,14 @@ function print_autocomplete_modules($name = 'module', $default = '', $id_agents
 	
 	?>
 	<script type="text/javascript">
+	function escapeHTML (str)
+	{
+	   var div = document.createElement('div');
+	   var text = document.createTextNode(str);
+	   div.appendChild(text);
+	   return div.innerHTML;
+	};
+	
 		$(document).ready (function () {		
 			$("#text-<?php echo $name; ?>").autocomplete(
 				"ajax.php",
@@ -1331,7 +1339,7 @@ function print_autocomplete_modules($name = 'module', $default = '', $id_agents
 						if (data == "")
 							return false;
 						
-						return data[0];
+						return escapeHTML(data[0]);
 					},
 					delay: 200
 				}