mbk-lab
/
nextcloud
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

prevent XSS

This commit is contained in:
Frank Karlitschek 2012-06-10 19:52:23 +02:00
parent c11f6cc3f9
commit bf4626da93
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
apps/external/ajax/setsites.php vendored
View File

@ -12,7 +12,7 @@ OCP\User::checkAdminUser();
$sites = array(); $sites = array();
for ($i = 0; $i < sizeof($_POST['site_name']); $i++) { for ($i = 0; $i < sizeof($_POST['site_name']); $i++) {
if (!empty($_POST['site_name'][$i]) && !empty($_POST['site_url'][$i])) { if (!empty($_POST['site_name'][$i]) && !empty($_POST['site_url'][$i])) {
array_push($sites, array($_POST['site_name'][$i], $_POST['site_url'][$i])); array_push($sites, array(strip_tags($_POST['site_name'][$i]), strip_tags($_POST['site_url'][$i])));
} }
} }