hmrhkr/Mailadminscript
1
0 Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Use htmlentities to mitigate potential XSS vulnerabilities

Browse Source
This commit is contained in:
Humorhenker committed 2019-09-27 14:41:48 +02:00
1 parent a48be33024
commit 632d9ccfeb
3 files changed
+7 -7
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

public/settings.php
+1 -1
View File
@@ -28,7 +28,7 @@ if ($_SESSION['log'] == 1) {
<title>Mail Settings</title>
</head>
<body>
<h1>Mail Settings:</h1><p>Guten Tag, ' . $_SESSION['username'] . '@' . $_SESSION['domain'] . '</p>';
<h1>Mail Settings:</h1><p>Guten Tag, ' . htmlentities($_SESSION['username']) . '@' . htmlentities($_SESSION['domain']) . '</p>';
$randval = rand(0, 99);
echo '<!-- '. $randval . ' -->';
if (rand(0,99) == 42) {