michael/webmin
1
0
Fork 0
mirror of https://github.com/webmin/webmin.git synced 2026-08-08 00:40:37 +01:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Fix to do more filtering to address reported XSS issue

Browse Source
This commit is contained in:
iliajie
2023-08-03 00:05:23 +03:00
parent 8ae4364ee1
commit 76389ea06c
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
usermin/save_categories.cgi
View File

@@ -16,7 +16,7 @@ foreach $t (keys %utext) {
if (!$in{$field."_def"}) {
$in{$field} ||
&error(&text('categories_edesc', $t ? $t : 'other'));
$catnames{$t} = $in{$field};
$catnames{$t} = &filter_javascript($in{$field});
}
}

4
webmin/save_categories.cgi
View File

@@ -11,8 +11,8 @@ foreach $t (keys %text) {
$field = $t || "other";
if (!$in{$field."_def"}) {
$in{$field} || &error(&text('categories_edesc', $t || 'other'));
$catnames{$t} = $in{$field};
$catnames{'other'} = $in{$field} if ($t eq "");
$catnames{$t} = &filter_javascript($in{$field});
$catnames{'other'} = &filter_javascript($in{$field}) if ($t eq "");
}
}