finish fixes for removal of 'each'; fix html injection in demo code

[plcapi.git] / demo / client / introspect.php

diff --git a/demo/client/introspect.php b/demo/client/introspect.php
index 7870a94..478d43b 100644 (file)
--- a/demo/client/introspect.php
+++ b/demo/client/introspect.php
@@ -61,12 +61,12 @@ if ($resp->faultCode()) {
             if ($val->kindOf() == "array") {
                 foreach ($val as $x) {
                     $ret = $x[0];
-                    print "<code>" . $ret->scalarval() . " "
-                        . $methodName->scalarval() . "(";
+                    print "<code>" . htmlspecialchars($ret->scalarval()) . " "
+                        . htmlspecialchars($methodName->scalarval()) . "(";
                     if ($x->count() > 1) {
                         for ($k = 1; $k < $x->count(); $k++) {
                             $y = $x[$k];
-                            print $y->scalarval();
+                            print htmlspecialchars($y->scalarval());
                             if ($k < $x->count() - 1) {
                                 print ", ";
                             }