Fixed a potential XSS vulnerability.

SVN:2.0.1[3667]
This commit is contained in:
Denis Flaven
2015-07-30 09:27:23 +00:00
parent e90f4e1232
commit 06e389f14c

View File

@@ -231,7 +231,7 @@ abstract class Dashboard
public function Render($oPage, $bEditMode = false, $aExtraParams = array())
{
$oPage->add('<h1>'.Dict::S($this->sTitle).'</h1>');
$oPage->add('<h1>'.htmlentities(Dict::S($this->sTitle), ENT_QUOTES, 'UTF-8', false).'</h1>');
$oLayout = new $this->sLayoutClass;
$oLayout->Render($oPage, $this->aCells, $bEditMode, $aExtraParams);
if (!$bEditMode)