stian/gallery3
1
0
Fork 0
mirror of https://github.com/Pathduck/gallery3.git synced 2026-08-19 13:25:36 -04:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix a bunch of XSS vulnerabilities turned up by manual inspection

Browse Source 
using the checklist in ticket #385.
This commit is contained in:
Bharat Mediratta
2009-07-01 17:57:39 -07:00
parent 7b1e3c5021
commit 8f9a943f55
15 changed files with 48 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/server_add/controllers/admin_server_add.php
+2 -2
View File
@@ -40,7 +40,7 @@ class Admin_Server_Add_Controller extends Admin_Controller {
module::set_var("server_add", "authorized_paths", serialize($paths));
$form->add_path->inputs->path->value = "";
message::success(t("Added path %path", array("path" => $path)));
message::success(t("Added path %path", array("path" => p::clean($path))));
server_add::check_config($paths);
url::redirect("admin/server_add");
@@ -62,7 +62,7 @@ class Admin_Server_Add_Controller extends Admin_Controller {
$path = $this->input->get("path");
$paths = unserialize(module::get_var("server_add", "authorized_paths"));
unset($paths[$path]);
message::success(t("Removed path %path", array("path" => $path)));
message::success(t("Removed path %path", array("path" => p::clean($path))));
module::set_var("server_add", "authorized_paths", serialize($paths));
server_add::check_config($paths);