added htmlspecialchars to config item output, fixes #41

1 files changed, 2 insertions, 2 deletions

diff --git a/system/libraries/Profiler.php b/system/libraries/Profiler.php
index 49a6774c1..0900a300d 100644
--- a/system/libraries/Profiler.php
+++ b/system/libraries/Profiler.php
@@ -303,7 +303,7 @@ class CI_Profiler {
 				$output .= "<tr><td width='50%' style='color:#000;background-color:#ddd;'>&#36;_POST[".$key."]&nbsp;&nbsp; </td><td width='50%' style='color:#009900;font-weight:normal;background-color:#ddd;'>";
 				if (is_array($val))
 				{
-					$output .= "<pre>" . htmlspecialchars(stripslashes(print_r($val, true))) . "</pre>";
+					$output .= "<pre>" . htmlspecialchars(stripslashes(print_r($val, TRUE))) . "</pre>";
 				}
 				else
 				{
@@ -464,7 +464,7 @@ class CI_Profiler {
 				$val = print_r($val, TRUE);
 			}
 			
-			$output .= "<tr><td valign='top' style='color:#900;background-color:#ddd;'>".$config."&nbsp;&nbsp;</td><td style='color:#000;background-color:#ddd;'>".$val."</td></tr>\n";
+			$output .= "<tr><td valign='top' style='color:#900;background-color:#ddd;'>".$config."&nbsp;&nbsp;</td><td style='color:#000;background-color:#ddd;'>".htmlspecialchars($val)."</td></tr>\n";
 		}
 
 		$output .= "</table>\n";