Merge pull request #2268 from protich/issue/field-config

bug: Sanitize choices options (Back port)

Reviewed-By: Jared Hancock <jared@osticket.com>

include/class.forms.php

@@ -3169,7 +3169,7 @@ class ChoicesWidget extends Widget {
                 continue; ?>
             <option value="<?php echo $key; ?>" <?php
                 if (isset($values[$key])) echo 'selected="selected"';
-            ?>><?php echo $name; ?></option>
+            ?>><?php echo Format::htmlchars($name); ?></option>
         <?php
         }
     }
@@ -3182,7 +3182,7 @@ class ChoicesWidget extends Widget {
                     continue; ?>
             <option value="<?php echo $key; ?>" <?php
                 if (isset($values[$key])) echo 'selected="selected"';
-            ?>><?php echo $name; ?></option>
+            ?>><?php echo Format::htmlchars($name); ?></option>
 <?php       } ?>
             </optgroup><?php
         }