mirror of
https://github.com/webmin/webmin.git
synced 2026-02-03 14:13:29 +00:00
XSS protection
This commit is contained in:
@@ -2,6 +2,7 @@
|
||||
# group_chooser.cgi
|
||||
# This CGI generated the HTML for choosing a group or list of groups.
|
||||
|
||||
$trust_unknown_referers = 1;
|
||||
require './web-lib.pl';
|
||||
&init_config();
|
||||
&ReadParse(undef, undef, 2);
|
||||
@@ -25,7 +26,8 @@ if ($in{'multi'}) {
|
||||
print "sel = new Array($len);\n";
|
||||
print "selr = new Array($len);\n";
|
||||
for($i=0; $i<$len; $i++) {
|
||||
print "sel[$i] = \"$ul[$i]\";\n";
|
||||
print "sel[$i] = \"".
|
||||
"e_escape($ul[$i], '"')."\";\n";
|
||||
@ginfo = getgrnam($ul[$i]);
|
||||
if (@ginfo) {
|
||||
@mems = &unique( split(/ /, $ginfo[3]),
|
||||
|
||||
Reference in New Issue
Block a user