Status template: Escape output of attributes.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@108 44740490-163a-0410-bde0-09ae8108e29a

templates/default/en/status.php

@@ -21,13 +21,13 @@
 			$attributes = $data['attributes'];
 			foreach ($attributes AS $name => $value) {
 				if (sizeof($value) > 1) {
-					echo '<tr><td>' . $name . '</td><td><ul>';
+					echo '<tr><td>' . htmlspecialchars($name) . '</td><td><ul>';
 					foreach ($value AS $v) {
-						echo '<li>' . $v . '</li>';
+						echo '<li>' . htmlspecialchars($v) . '</li>';
 					}
 					echo '</ul></td></tr>';
 				} else {
-					echo '<tr><td>' . $name . '</td><td>' . $value[0] . '</td></tr>';
+					echo '<tr><td>' . htmlspecialchars($name) . '</td><td>' . htmlspecialchars($value[0]) . '</td></tr>';
 				}
 			}