Add HTML escape for the names of groups being deleted

This commit is contained in:
iliajie
2023-05-15 21:32:18 +03:00
parent 728ae07eed
commit 87aa2576c2

View File

@@ -31,7 +31,7 @@ if (!$config{'delete_root'} && $delete_sys) {
if ($in{'confirmed'}) { if ($in{'confirmed'}) {
foreach $group (@dlist) { foreach $group (@dlist) {
# Show group name # Show group name
print "<b>",&text('gmass_doing', $group->{'group'}),"</b><br>\n"; print "<b>",&text('gmass_doing', &html_escape($group->{'group'})),"</b><br>\n";
print "<ul>\n"; print "<ul>\n";
# Delete from other modules # Delete from other modules
@@ -72,7 +72,7 @@ else {
foreach $u (&list_users()) { foreach $u (&list_users()) {
if ($u->{'gid'} == $group->{'gid'}) { if ($u->{'gid'} == $group->{'gid'}) {
print "<b>",&text('gmass_eprimary', print "<b>",&text('gmass_eprimary',
$group->{'group'}, $u->{'user'}), &html_escape($group->{'group'}), $u->{'user'}),
"</b> <p>\n"; "</b> <p>\n";
&ui_print_footer("", $text{'index_return'}); &ui_print_footer("", $text{'index_return'});
exit; exit;