michael/webmin
1
0
Fork 0
mirror of https://github.com/webmin/webmin.git synced 2026-02-03 06:03:28 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix escaping of javascript, and remove un-necessary referrer skip on popup windows

Browse Source
This commit is contained in:
Jamie Cameron
2014-05-19 17:31:15 -07:00
parent 61713196d9
commit ade27449c8
7 changed files with 2 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
chooser.cgi
View File

@@ -16,7 +16,6 @@ use WebminCore;
"tar", "binary.gif"
);
$trust_unknown_referers = 1;
&init_config();
if (&get_product_name() eq 'usermin') {
&switch_to_remote_user();

1
date_chooser.cgi
View File

@@ -6,7 +6,6 @@ BEGIN { push(@INC, ".."); };
use WebminCore;
use Time::Local;
$trust_unknown_referers = 1;
&init_config();
&ReadParse();

3
group_chooser.cgi
View File

@@ -5,7 +5,6 @@
BEGIN { push(@INC, ".."); };
use WebminCore;
$trust_unknown_referers = 1;
&init_config();
if (&get_product_name() eq 'usermin') {
&switch_to_remote_user();
@@ -26,7 +25,7 @@ if ($in{'multi'}) {
# base frame
&PrintHeader();
print "<script type='text/javascript'>\n";
@ul = &split_quoted($in{'group'});
@ul = &split_quoted(&filter_javascript($in{'group'}));
$len = @ul;
print "sel = new Array($len);\n";
print "selr = new Array($len);\n";

1
help.cgi
View File

@@ -5,7 +5,6 @@
BEGIN { push(@INC, ".."); };
use WebminCore;
$trust_unknown_referers = 1;
&init_config();
&error_setup($text{'help_err'});
$ENV{'PATH_INFO'} !~ /[\\\&\;\`\'\"\|\*\?\~\<\>\^\(\)\[\]\{\}\$\n\r]/ ||

1
module_chooser.cgi
View File

@@ -4,7 +4,6 @@
BEGIN { push(@INC, ".."); };
use WebminCore;
$trust_unknown_referers = 1;
&init_config();
&ReadParse(undef, undef, 2);
%access = &get_module_acl();

1
uptracker.cgi
View File

@@ -4,7 +4,6 @@
BEGIN { push(@INC, ".."); };
use WebminCore;
$trust_unknown_referers = 1;
&init_config();
&ReadParse();
$id = $in{'id'};

5
user_chooser.cgi
View File

@@ -5,7 +5,6 @@
BEGIN { push(@INC, ".."); };
use WebminCore;
$trust_unknown_referers = 1;
&init_config();
if (&get_product_name() eq 'usermin') {
&switch_to_remote_user();
@@ -19,7 +18,7 @@ if ($in{'multi'}) {
# base frame
&PrintHeader();
print "<script type='text/javascript'>\n";
@ul = split(/\s+/, $in{'user'});
@ul = split(/\s+/, &filter_javascript($in{'user'}));
$len = @ul;
print "sel = new Array($len);\n";
print "selr = new Array($len);\n";
@@ -31,8 +30,6 @@ if ($in{'multi'}) {
$gn = $ul[$i];
$gn =~ s/^(@|\+|&)+//g;
@uinfo = getpwnam($gn);
#@uinfo = getpwnam($ul[$i]);
if (@uinfo) {
print "selr[$i] = \"".
quotemeta($uinfo[6])."\";\n";