lingej/pnp4nagios — pull request #77 by mfalkvidd (2014-06-18 15:33:08+00:00)
Title: views/timerange_select: escape keys and values

Escape keys and values of GET parameters before adding them
as hidden inputs in the time range form.

Without escaping, an XSS attack can be performed:
http://example.com/pnp/graph?host=a&srv=b&view=0">
(the host a with service b must exist)

Signed-off-by: Mikael Falkvidd