From a7d0b9810f960d97ac03488cae9814b31e6ff3f7 Mon Sep 17 00:00:00 2001 From: Jerome Jutteau Date: Tue, 1 May 2018 12:37:55 +0200 Subject: [PATCH] [BUGFIX] Fix XSS in admin pannel Signed-off-by: Jerome Jutteau --- lib/functions.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lib/functions.php b/lib/functions.php index 9fa0e5e..e237274 100644 --- a/lib/functions.php +++ b/lib/functions.php @@ -553,13 +553,13 @@ function jirafeau_admin_list($name, $file_hash, $link_hash) { echo '
'; if (!empty($name)) { - echo t('FILENAME') . ": $name "; + echo t('FILENAME') . ": " . jirafeau_escape($name); } if (!empty($file_hash)) { - echo t('FILE') . ": $file_hash "; + echo t('FILE') . ": " . jirafeau_escape($file_hash); } if (!empty($link_hash)) { - echo t('LINK') . ": $link_hash "; + echo t('LINK') . ": " . jirafeau_escape($link_hash); } if (empty($name) && empty($file_hash) && empty($link_hash)) { echo t('LS_FILES'); -- 2.34.1