Project

General

Profile

Actions

Bug #2388

closed

Backend: more htmlspecialchars missing

Added by beat over 11 years ago. Updated over 11 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Start date:
09 March 2011
Due date:
% Done:

100%

Estimated time:

Description

admin.cbgroupjive.php function showConfig : missing htmlspecialchars for input values everywhere (around 30 places):

e.g.

        $input['general_title']                =    '<input type="text" id="general_title" name="general_title" value="' . $plugin->params->get( 'general_title', $plugin->name ) . '" class="inputbox" size="25" />';

should be:

        $input['general_title']                =    '<input type="text" id="general_title" name="general_title" value="' . htmlspecialchars( $plugin->params->get( 'general_title', $plugin->name ) ) . '" class="inputbox" size="25" />';
Actions #1

Updated by krileon over 11 years ago

  • Status changed from New to Resolved
  • Assignee changed from krileon to beat
  • % Done changed from 0 to 100

Fixed in r1611

Actions #2

Updated by krileon over 11 years ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF