michael/webmin
1
0
Fork 0
mirror of https://github.com/webmin/webmin.git synced 2026-02-03 14:13:29 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

XSS protection

Browse Source
This commit is contained in:
Jamie Cameron
2008-02-15 00:11:09 +00:00
parent 664f4406d2
commit 3936dc6ec1
3 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
mount/nfs_export.cgi
View File

@@ -2,9 +2,10 @@
# nfs_export.cgi
# Display a list of NFS exports on some host for the user to choose from
$trust_unknown_referers = 1;
require './mount-lib.pl';
&ReadParse();
&popup_header(&text('nfs_choose', $in{'server'}));
&popup_header(&text('nfs_choose', &html_escape($in{'server'})));
print <<EOF;
<script>
function choose(f)
@@ -16,7 +17,7 @@ window.close();
EOF
if ($error = &exports_list($in{'server'}, \@dirs, \@clients)) {
print "<b>",&text('nfs_failed', $in{'server'},
print "<b>",&text('nfs_failed', &html_escape($in{'server'}),
"<p><tt>$error</tt><p>"),"</b>\n";
exit;
}

1
mount/nfs_server.cgi
View File

@@ -3,6 +3,7 @@
# Called in a pop-up javascript window to display a list of known NFS
# servers, generated by broadcasting on the NFS port
$trust_unknown_referers = 1;
require './mount-lib.pl';
use Socket;
&popup_header($text{'nfs_server'});

1
mount/smb_server.cgi
View File

@@ -3,6 +3,7 @@
# Called in a pop-up javascript window to display a list of known SMB
# servers, by calling smbclient to request the browse list from some server
$trust_unknown_referers = 1;
require './mount-lib.pl';
use Socket;
&popup_header($text{'smb_choose'});