Fix stored XSS vulnerability in the serverlist

diff --git a/util/master/list.js b/util/master/list.js
index 1c9547fbdf2daa113c068832f1d784a7869533c1..a17458fb480844784ef13fa478a38e25fad7b7cd 100644 (file)
--- a/util/master/list.js
+++ b/util/master/list.js
@@ -48,7 +48,7 @@ function success(r) {
         if (/:/.test(s.address)) s.address = '[' + s.address + ']';
         h += '<tr class="mts_row">';
         h += '<td class="mts_address">' + e(s.address) + (s.port != 30000 ? (':' + e(s.port)) : '') + '</td>';
-        h += '<td class="mts_clients">' + e(s.clients) + (s.clients_max ? '/' + e(s.clients_max) : '') + (s.clients_top ? ', ' + s.clients_top : '') + '</td>';
+        h += '<td class="mts_clients">' + e(s.clients) + (s.clients_max ? '/' + e(s.clients_max) : '') + (s.clients_top ? ', ' + e(s.clients_top) : '') + '</td>';
         var mods = 0;
         if (s.mods && jQuery.isArray(s.mods)) {
             mods = s.mods.length;