mirror of
https://github.com/Combodo/iTop.git
synced 2026-04-23 10:38:45 +02:00
Fix for Trac#446: prevent XSS vulnerabilities
SVN:trunk[1564]
This commit is contained in:
@@ -50,7 +50,7 @@ function DumpHiddenParams($oP, $aInteractive, $aParameters)
|
||||
{
|
||||
if (!in_array($sAttCode, $aInteractive))
|
||||
{
|
||||
$oP->Add("<input type=\"hidden\" name=\"attr_$sAttCode\" value=\"$value\">");
|
||||
$oP->Add("<input type=\"hidden\" name=\"attr_$sAttCode\" value=\"".htmlentities($value)."\">");
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user