michael/webmin
1
0
Fork 0
mirror of https://github.com/webmin/webmin.git synced 2026-02-03 14:13:29 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

XSS protection

Browse Source
This commit is contained in:
Jamie Cameron
2008-02-14 23:42:29 +00:00
parent 328ccb110e
commit 9549808ff7
2 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
group_chooser.cgi
View File

@@ -2,6 +2,7 @@
# group_chooser.cgi
# This CGI generated the HTML for choosing a group or list of groups.
$trust_unknown_referers = 1;
require './web-lib.pl';
&init_config();
&ReadParse(undef, undef, 2);
@@ -25,7 +26,8 @@ if ($in{'multi'}) {
print "sel = new Array($len);\n";
print "selr = new Array($len);\n";
for($i=0; $i<$len; $i++) {
print "sel[$i] = \"$ul[$i]\";\n";
print "sel[$i] = \"".
&quote_escape($ul[$i], '"')."\";\n";
@ginfo = getgrnam($ul[$i]);
if (@ginfo) {
@mems = &unique( split(/ /, $ginfo[3]),

4
user_chooser.cgi
View File

@@ -2,6 +2,7 @@
# user_chooser.cgi
# This CGI generated the HTML for choosing a user or list of users.
$trust_unknown_referers = 1;
require './web-lib.pl';
&init_config();
&ReadParse(undef, undef, 2);
@@ -18,7 +19,8 @@ if ($in{'multi'}) {
print "sel = new Array($len);\n";
print "selr = new Array($len);\n";
for($i=0; $i<$len; $i++) {
print "sel[$i] = \"$ul[$i]\";\n";
print "sel[$i] = \"".
&quote_escape($ul[$i], '"')."\";\n";
@uinfo = getpwnam($ul[$i]);
if (@uinfo) { print "selr[$i] = \"$uinfo[6]\";\n"; }
else { print "selr[$i] = \"???\";\n"; }