composer/iTop
6
0
Fork 0
mirror of https://github.com/Combodo/iTop.git synced 2026-04-24 02:58:43 +02:00
Code Issues Packages Projects Releases Wiki Activity

N°2306 - Security hardening

Browse Source
This commit is contained in:
Molkobain
2020-01-07 20:57:38 +01:00
parent fdd79e91f0
commit ebfe9da464
1 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
datamodels/2.x/itop-portal-base/portal/src/Helper/ObjectFormHandlerHelper.php
View File

@@ -260,11 +260,16 @@ class ObjectFormHandlerHelper
break;
default:
// Do nothing
// As of N°2306 we don't put the $_SERVER['REQUEST_URI'] anymore as it could lead to XSS.
$sFormEndpoint = null;
break;
}
$oFormRenderer = new BsFormRenderer();
$oFormRenderer->SetEndpoint($sFormEndpoint);
if($sFormEndpoint !== null)
{
$oFormRenderer->SetEndpoint($sFormEndpoint);
}
$oFormManager = new ObjectFormManager();
$oFormManager->SetContainer($this->oContainer)