--- a/web/criticaleditor.c +++ b/web/criticaleditor.c @@ -234,9 +234,9 @@ void findrecord(char *hostname, char *se sethostenv(hostname, "", service, colorname(COL_BLUE), NULL); *warnmsg = '\0'; - if (!rec && nodatawarning) sprintf(warnmsg, "<SCRIPT LANGUAGE=\"Javascript\" type=\"text/javascript\"> alert('%s'); </SCRIPT>\n", nodatawarning); - if (isaclone && isclonewarning) sprintf(warnmsg, "<SCRIPT LANGUAGE=\"Javascript\" type=\"text/javascript\"> alert('%s'); </SCRIPT>\n", isclonewarning); - if (hasclones && hascloneswarning) sprintf(warnmsg, "<SCRIPT LANGUAGE=\"Javascript\" type=\"text/javascript\"> alert('%s'); </SCRIPT>\n", hascloneswarning); + if (!rec && nodatawarning) snprintf(warnmsg, sizeof(warnmsg), "%s", nodatawarning); + if (isaclone && isclonewarning) snprintf(warnmsg, sizeof(warnmsg), "%s", isclonewarning); + if (hasclones && hascloneswarning) snprintf(warnmsg, sizeof(warnmsg), "%s", hascloneswarning); printf("Content-type: %s\n\n", xgetenv("HTMLCONTENTTYPE")); showform(stdout, "critedit", "critedit_form", COL_BLUE, getcurrenttime(NULL), warnmsg, NULL); --- a/lib/headfoot.c +++ b/lib/headfoot.c @@ -1645,7 +1645,7 @@ void showform(FILE *output, char *header close(formfile); if (headertemplate) headfoot(output, headertemplate, (hostenv_pagepath ? hostenv_pagepath : ""), "header", color); - if (pretext) fprintf(output, "%s", pretext); + if (pretext) fprintf(output, "<center><strong><big>%s</big></strong></center>\n", pretext); output_parsed(output, inbuf, color, seltime); if (posttext) fprintf(output, "%s", posttext); if (headertemplate) headfoot(output, headertemplate, (hostenv_pagepath ? hostenv_pagepath : ""), "footer", color);