瀏覽代碼

Security issue: Adding Security::remove_XSS function

Julio Montoya 15 年之前
父節點
當前提交
267dc40f2a
共有 1 個文件被更改,包括 1 次插入1 次删除
  1. 1 1
      main/inc/lib/dashboard.lib.php

+ 1 - 1
main/inc/lib/dashboard.lib.php

@@ -35,7 +35,7 @@ class DashboardManager
 
 
 		$table_cols = array('name', 'version', 'description');
 		$table_cols = array('name', 'version', 'description');
 		echo '<h3>'.get_lang('DashboardPlugins').'</h3>';
 		echo '<h3>'.get_lang('DashboardPlugins').'</h3>';
-		echo '<form name="plugins" method="post" action="'.api_get_self().'?category='.$_GET['category'].'">';
+		echo '<form name="plugins" method="post" action="'.api_get_self().'?category='.Security::remove_XSS($_GET['category']).'">';
 		echo '<table class="data_table">';
 		echo '<table class="data_table">';
 		echo '<tr>';
 		echo '<tr>';
 		echo '<th width="50px">'.get_lang('Enabled').'</th>';
 		echo '<th width="50px">'.get_lang('Enabled').'</th>';