michael/webmin
1
0
Fork 0
mirror of https://github.com/webmin/webmin.git synced 2026-02-03 06:03:28 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix to filter out user passed page

Browse Source 
[no-build]
This commit is contained in:
Ilia Ross
2025-11-08 18:26:35 +02:00
parent 2051bfe6dc
commit ff9348c056
2 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
pam_login.cgi
View File

@@ -32,6 +32,7 @@ if ($gconfig{'loginbanner'} && $ENV{'HTTP_COOKIE'} !~ /banner=1/ &&
print "Set-Cookie: banner=1; path=/\r\n";
&PrintHeader();
$url = $in{'page'};
$url = &filter_javascript($url);
open(BANNER, "<$gconfig{'loginbanner'}");
while(<BANNER>) {
s/LOGINURL/$url/g;

1
session_login.cgi
View File

@@ -40,6 +40,7 @@ if ($gconfig{'loginbanner'} && $ENV{'HTTP_COOKIE'} !~ /banner=1/ &&
print "Set-Cookie: banner=1; path=/".$sec."\r\n";
&PrintHeader();
$url = $in{'page'};
$url = &filter_javascript($url);
open(BANNER, "<$gconfig{'loginbanner'}");
while(<BANNER>) {
s/LOGINURL/$url/g;