Index: trunk/admin/config/addcustomfield.php
===================================================================
diff -u -r964 -r2453
--- trunk/admin/config/addcustomfield.php	(.../addcustomfield.php)	(revision 964)
+++ trunk/admin/config/addcustomfield.php	(.../addcustomfield.php)	(revision 2453)
@@ -239,7 +239,7 @@
 </TR>    
 <TR <?php int_table_color(); ?> >
   <TD><SPAN id="prompt_valuelist"><?php echo prompt_language("la_prompt_valuelist"); ?></SPAN></TD>
-  <TD><input type=text  tabindex="6" NAME="valuelist" VALUE="<?php echo $c->Get("ValueList"); ?>"></TD>
+  <TD><input type=text  tabindex="6" NAME="valuelist" VALUE="<?php echo htmlspecialchars( $c->Get("ValueList") ); ?>"></TD>
   <TD></TD>  
 </TR>                                                       
 <TR <?php int_table_color(); ?> >