From c7f8a4ea63d64566e8bbfec7ff4b2924b8c81875 Mon Sep 17 00:00:00 2001
From: "Cathy J. Fitzpatrick" <cathy@cathyjf.com>
Date: Sun, 14 Apr 2013 01:00:51 -0600
Subject: [PATCH] Fix some XSS attacks in index.php

---
 index.php.template.txt | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/index.php.template.txt b/index.php.template.txt
index 87287eb80..41802eadf 100644
--- a/index.php.template.txt
+++ b/index.php.template.txt
@@ -121,9 +121,9 @@ $serverlibrary = $serverlibs[$serverprotocol];
 		<meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" />
 	<script>
 		var Config = {
-			server: '<?php echo $server ?>',
-			serverid: '<?php echo $serverid ?>',
-			serverport: <?php echo $serverport ?>,
+			server: <?php echo json_encode($server) ?>,
+			serverid: <?php echo json_encode($serverid) ?>,
+			serverport: <?php echo intval($serverport) ?>,
 			<?php if (!empty($serveraltport)) echo "serveraltport: $serveraltport,\n"; ?>
 <?php if ($psim) { ?>
 			crossdomain: <?php echo json_encode($hostprefix) ?>,