gnh1201/seeddms-code
1
0
Fork 0
mirror of https://git.code.sf.net/p/seeddms/code synced 2025-02-06 15:14:58 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix xss attack in DefaultKeywords

Browse Source
This commit is contained in:
Uwe Steinmann 2022-03-23 11:27:42 +01:00
parent a7212a0708
commit 6fc17be5d9
2 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
CHANGELOG
View File

@ -9,6 +9,7 @@
- various improvements for workflows
- output splash message when removing, editing, adding a category or keyword
- extensions cannot be disabled/enabled if configuration file is not writeable
- prevent cross site scripting in views/bootstrap/class.DefaultKeywords.php
--------------------------------------------------------------------------------
Changes in version 5.1.24

2
views/bootstrap/class.DefaultKeywords.php
View File

@ -140,7 +140,7 @@ $(document).ready( function() {
'element'=>'input',
'type'=>'text',
'name'=>'name',
'value'=>$category->getName()
'value'=>($category ? htmlspecialchars($category->getName()) : '')
)
);
$this->contentContainerEnd();