Changeset 3121:65e65154dadf for admin/comments.php

Timestamp:

10/22/15 14:42:12 (10 years ago)

Author:

franck <carnet.franck.paul@…>

Branch:

2.8

Message:

Fix minor XSS, thanks Tim Coen for report

File:

• admin/comments.php (modified) (1 diff)

admin/comments.php

@@ -271 +271 @@
      form::hidden(array('sortby'),$sortby).
      form::hidden(array('order'),$order).
-     form::hidden(array('author'),preg_replace('/%/','%%',$author)).
+     form::hidden(array('author'),html::escapeHTML(preg_replace('/%/','%%',$author))).
      form::hidden(array('status'),$status).
      form::hidden(array('ip'),preg_replace('/%/','%%',$ip)).