maketank/Froxlor
2
0
Fork 0
Code Pull Requests Releases Activity

Fixing a XSS - vulnerability discovered by tomreyn

Browse Source 
Signed-off-by: Florian Aders (EleRas) <eleras@froxlor.org>
This commit is contained in:
Florian Aders (EleRas)
2011-03-19 13:14:28 +01:00
parent 0f4695a43f
commit 5e0c641a02
3 changed files with 16 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
lib/formfields/admin/ticket/formfield.ticket_reply.php
View File

@@ -38,7 +38,7 @@ return array(
'category' => array(
'label' => $lng['ticket']['category'],
'type' => 'label',
'value' => $row['name']
'value' => htmlentities($row['name']),
),
'message' => array(
'style' => 'vertical-align:top;',

2
lib/functions/phphelpers/function.htmlentities_array.php
View File

@@ -29,7 +29,7 @@
* @author Florian Lippert <flo@syscp.org>
*/
function htmlentities_array($subject, $fields = '', $quote_style = ENT_COMPAT, $charset = 'ISO-8859-1')
function htmlentities_array($subject, $fields = '', $quote_style = ENT_QUOTES, $charset = 'ISO-8859-1')
{
if(is_array($subject))
{