From 511e3d72b875401b5cc61a28df45fb65acfd689a Mon Sep 17 00:00:00 2001
From: Derek Jones <derek.jones@ellislab.com>
Date: Thu, 13 May 2010 09:03:30 -0500
Subject: added htmlspecialchars to config item output, fixes #41

---
 system/libraries/Profiler.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/system/libraries/Profiler.php b/system/libraries/Profiler.php
index 49a6774c1..0900a300d 100644
--- a/system/libraries/Profiler.php
+++ b/system/libraries/Profiler.php
@@ -303,7 +303,7 @@ class CI_Profiler {
 				$output .= "<tr><td width='50%' style='color:#000;background-color:#ddd;'>&#36;_POST[".$key."]&nbsp;&nbsp; </td><td width='50%' style='color:#009900;font-weight:normal;background-color:#ddd;'>";
 				if (is_array($val))
 				{
-					$output .= "<pre>" . htmlspecialchars(stripslashes(print_r($val, true))) . "</pre>";
+					$output .= "<pre>" . htmlspecialchars(stripslashes(print_r($val, TRUE))) . "</pre>";
 				}
 				else
 				{
@@ -464,7 +464,7 @@ class CI_Profiler {
 				$val = print_r($val, TRUE);
 			}
 			
-			$output .= "<tr><td valign='top' style='color:#900;background-color:#ddd;'>".$config."&nbsp;&nbsp;</td><td style='color:#000;background-color:#ddd;'>".$val."</td></tr>\n";
+			$output .= "<tr><td valign='top' style='color:#900;background-color:#ddd;'>".$config."&nbsp;&nbsp;</td><td style='color:#000;background-color:#ddd;'>".htmlspecialchars($val)."</td></tr>\n";
 		}
 
 		$output .= "</table>\n";
-- 
cgit v1.2.3-24-g4f1b