mirror of
https://gitea.psi.ch/ELOG/elog.git
synced 2026-09-10 18:23:28 +00:00
Fixed a few other XSS vulnerabilities
SVN revision: 1911
This commit is contained in:
parent
03061b3301
commit
1720f2e945
@ -19120,7 +19120,7 @@ void show_elog_list(LOGBOOK * lbs, int past_n, int last_n, int page_n, BOOL defa
|
|||||||
strlcat(line, " | ", sizeof(line));
|
strlcat(line, " | ", sizeof(line));
|
||||||
|
|
||||||
if (comment[0] == 0)
|
if (comment[0] == 0)
|
||||||
strlcat(line, getparam(iattr), sizeof(line));
|
strencode2(line+strlen(line), getparam(iattr), sizeof(line)-strlen(line));
|
||||||
else
|
else
|
||||||
strlcat(line, comment, sizeof(line));
|
strlcat(line, comment, sizeof(line));
|
||||||
}
|
}
|
||||||
@ -19137,7 +19137,7 @@ void show_elog_list(LOGBOOK * lbs, int past_n, int last_n, int page_n, BOOL defa
|
|||||||
strlcat(line, " | ", sizeof(line));
|
strlcat(line, " | ", sizeof(line));
|
||||||
|
|
||||||
if (comment[0] == 0)
|
if (comment[0] == 0)
|
||||||
strlcat(line, getparam(attr_list[i]), sizeof(line));
|
strencode2(line+strlen(line), getparam(attr_list[i]), sizeof(line)-strlen(line));
|
||||||
else
|
else
|
||||||
strlcat(line, comment, sizeof(line));
|
strlcat(line, comment, sizeof(line));
|
||||||
}
|
}
|
||||||
@ -19164,7 +19164,7 @@ void show_elog_list(LOGBOOK * lbs, int past_n, int last_n, int page_n, BOOL defa
|
|||||||
if (isparam(attr_list[i])) {
|
if (isparam(attr_list[i])) {
|
||||||
if (line[0])
|
if (line[0])
|
||||||
strlcat(line, " | ", sizeof(line));
|
strlcat(line, " | ", sizeof(line));
|
||||||
strlcat(line, getparam(attr_list[i]), sizeof(line));
|
strencode2(line+strlen(line), getparam(attr_list[i]), sizeof(line)-strlen(line));
|
||||||
}
|
}
|
||||||
|
|
||||||
if (line[0]) {
|
if (line[0]) {
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user