luci-base: html escape values in uci changes display

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 7513a4ca35815f60187b7d33fdd2ee3aa5cb4a2b)

diff --git a/modules/luci-mod-admin-full/luasrc/view/admin_uci/changelog.htm b/modules/luci-mod-admin-full/luasrc/view/admin_uci/changelog.htm
index 9d6267cf31af1cbc475c428f2219e4f730bfa7dd..051e250db86bca82e712de8f1d953e9eac4f974b 100644 (file)
--- a/modules/luci-mod-admin-full/luasrc/view/admin_uci/changelog.htm
+++ b/modules/luci-mod-admin-full/luasrc/view/admin_uci/changelog.htm
@@ -48,7 +48,7 @@
                                                        return delta[2]
                                                end
                                        elseif n == "4" then
-                                               return util.shellquote(delta[4])
+                                               return pcdata(util.shellquote(delta[4]))
                                        else
                                                return delta[tonumber(n)]
                                        end