bugfix: errorstring may contain <> etc...

1 files changed, 1 insertions, 1 deletions

diff --git a/error.cgi b/error.cgi
index bd5cf1b..8032bf1 100755
--- a/error.cgi
+++ b/error.cgi
@@ -83,7 +83,7 @@ if (errorstr)
 	$h << <<ERROR
 <br/>
 Please include the following as well:
-<pre style='background:#DDD;padding : 1em'>#{errorstr}</pre>
+<pre style='background:#DDD;padding : 1em'>#{CGI.escapeHTML(errorstr)}</pre>
 ERROR
 end