harukin/core
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

since this is now usable, protect the displayed delivery reports from XSS injection

Browse Source
This commit is contained in:
redmatrix 2015-09-22 04:08:03 -07:00
parent 2869ccfe39
commit 4b13f0e025
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
mod/dreport.php
View File

@ -32,7 +32,7 @@ function dreport_content(&$a) {
foreach($r as $rr) { foreach($r as $rr) {
$name = escape_tags(substr($rr['dreport_recip'],strpos($rr['dreport_recip'],' '))); $name = escape_tags(substr($rr['dreport_recip'],strpos($rr['dreport_recip'],' ')));
$o .= '<tr><td>' . $name . '</td><td>' . $rr['dreport_result'] . '</td><td>' . $rr['dreport_time'] . '</td></tr>'; $o .= '<tr><td>' . $name . '</td><td>' . escape_tags($rr['dreport_result']) . '</td><td>' . escape_tags($rr['dreport_time']) . '</td></tr>';
} }
$o .= '</table>'; $o .= '</table>';