Public/elog
1
0
Fork 0
mirror of https://gitea.psi.ch/ELOG/elog.git synced 2026-09-10 18:23:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fixed XSS vulnerability with subtext

Browse Source 
SVN revision: 1913
This commit is contained in:
Stefan Ritt 2007-09-06 19:28:30 +00:00
parent cc5db91d04
commit c80f09165b
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/elogd.c
View File

@ -17372,8 +17372,10 @@ void show_page_filters(LOGBOOK * lbs, int n_msg, int page_n, BOOL mode_commands,
("<input onClick=\"this.value='';\" title=\"%s\" type=text onChange=\"document.form1.submit()\"", ("<input onClick=\"this.value='';\" title=\"%s\" type=text onChange=\"document.form1.submit()\"",
str); str);
sprintf(str, "-- %s --", list[index]); sprintf(str, "-- %s --", list[index]);
rsprintf(" name=\"%s\" value=\"%s\">\n", list[index], if (isparam(list[index]) && *getparam(list[index]))
isparam(list[index]) && *getparam(list[index]) ? getparam(list[index]) : str); strencode2(str, getparam(list[index]), sizeof(str));
rsprintf(" name=\"%s\" value=\"%s\">\n", list[index], str);
} }
} else { } else {