From 703745d0ed3948623153117d761ce48514e2f281 Mon Sep 17 00:00:00 2001
From: Neil Lathwood <gh+n@laf.io>
Date: Tue, 22 Feb 2022 14:28:31 +0000
Subject: [PATCH] Resolved XSS issue from alert rule list modal (#13805)

---
 includes/html/modal/alert_rule_list.inc.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/includes/html/modal/alert_rule_list.inc.php b/includes/html/modal/alert_rule_list.inc.php
index ad6a50c73658..aa604c260ea4 100644
--- a/includes/html/modal/alert_rule_list.inc.php
+++ b/includes/html/modal/alert_rule_list.inc.php
@@ -62,7 +62,7 @@
                             echo "
                                 <tr>
                                     <td>{$rule['name']}</td>
-                                    <td><i>" . htmlentities($rule_display) . "</i></td>
+                                    <td><i>" . htmlentities(strip_tags($rule_display)) . "</i></td>
                                     <td>{$rule['severity']}</td>
                                     <td>{$rule['id']}</td>
                                 </tr>