Use htmlentities to mitigate potential XSS vulnerabilities

This commit is contained in:
Humorhenker committed 2019-09-27 14:41:48 +02:00
1 parent a48be33024
commit 632d9ccfeb
3 files changed
+7 -7

No files matched your search

+1 -1
View File
@@ -45,7 +45,7 @@ echo '<h2>Mailliste Abmeldung:</h2>
<form method="POST" action="bin/unsubmaillistpre.php">
<label>Maillistadresse: <input name="source_adress" type="text"';
if (isset($_GET['maillist'])) {
echo 'value="' . htmlspecialchars($_GET['maillist']) . '" readonly="true"';
echo 'value="' . htmlentities($_GET['maillist']) . '" readonly="true"';
}
echo '/></label>
<label>Nutzeradresse: <input name="destination_adress" type="text"/></label>