fix an XSS bug
This commit is contained in:
parent
1945cd6946
commit
d2b0de614e
|
@ -115,6 +115,6 @@ elseif(OC_User::isLoggedIn()) {
|
||||||
if(is_null(OC::$REQUESTEDFILE)){
|
if(is_null(OC::$REQUESTEDFILE)){
|
||||||
$sectoken=rand(1000000,9999999);
|
$sectoken=rand(1000000,9999999);
|
||||||
$_SESSION['sectoken']=$sectoken;
|
$_SESSION['sectoken']=$sectoken;
|
||||||
OC_Template::printGuestPage('', 'login', array('error' => $error, 'sectoken' => $sectoken, 'redirect' => isset($_REQUEST['redirect_url'])?$_REQUEST['redirect_url']:'' ));
|
OC_Template::printGuestPage('', 'login', array('error' => $error, 'sectoken' => $sectoken, 'redirect' => isset($_REQUEST['redirect_url'])?strip_tags($_REQUEST['redirect_url']):'' ));
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in New Issue