Add missed patch to address XSS (in Usermin)

This commit is contained in:
Ilia
2022-06-13 11:38:58 +03:00
parent 3885ea27c2
commit 7f71a4b8f8

View File

@@ -2533,7 +2533,7 @@ foreach my $f (@$folders) {
}
}
push(@opts, [ $byid ? &folder_name($f) : $f->{'index'},
$f->{'name'}.$umsg ]);
&html_escape($f->{'name'}).$umsg ]);
}
return &ui_select($name, $byid ? &folder_name($folder) : $folder->{'index'},
\@opts, 1, 0, 0, 0, $auto ? "onChange='form.submit()'" : "");