Public/elog
1
0
Fork 0
mirror of https://gitea.psi.ch/ELOG/elog.git synced 2026-09-12 19:33:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fixed XSS issue with mail0

Browse Source 
SVN revision: 2391
This commit is contained in:
Stefan Ritt 2011-03-01 07:35:51 +00:00
parent 4d80eda678
commit c82b16df64
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/elogd.c
View File

@ -23855,14 +23855,16 @@ void show_elog_entry(LOGBOOK * lbs, char *dec_path, char *command)
rsprintf("<tr><td class=\"notifymsg\" colspan=2>%s</td></tr>\n", rsprintf("<tr><td class=\"notifymsg\" colspan=2>%s</td></tr>\n",
loc("Email notification suppressed")); loc("Email notification suppressed"));
} else if (isparam("error")) { } else if (isparam("error")) {
rsprintf("<tr><td class=\"errormsg\" colspan=2>%s</td></tr>\n", getparam("error")); strencode2(str, getparam("error"), sizeof(str));
rsprintf("<tr><td class=\"errormsg\" colspan=2>%s</td></tr>\n", str);
} else { } else {
for (i = 0;; i++) { for (i = 0;; i++) {
sprintf(str, "mail%d", i); sprintf(str, "mail%d", i);
if (isparam(str)) { if (isparam(str)) {
if (i == 0) if (i == 0)
rsprintf("<tr><td class=\"notifymsg\" colspan=2>"); rsprintf("<tr><td class=\"notifymsg\" colspan=2>");
rsprintf("%s <b>%s</b><br>\n", loc("Email sent to"), getparam(str)); strencode2(str, getparam(str), sizeof(str));
rsprintf("%s <b>%s</b><br>\n", loc("Email sent to"), str);
} else } else
break; break;
} }