Changeset 3087:b739d0de9983 for inc/admin

Timestamp:

09/02/15 09:01:58 (10 years ago)

Author:

Dsls

Branch:

2.8

Children:

3088:5e6b3da2b372, 3095:7b52a5c13c7e

Message:

Fixed admin pager parameters escaping.

File:

• inc/admin/lib.pager.php (modified) (1 diff)

inc/admin/lib.pager.php

@@ -52 +52 @@
                if (is_array($v)) {
                     foreach ($v as $k2=>$v2) {
-                         $this->form_hidden .= form::hidden(array($k.'[]'),$v2);
+                         $this->form_hidden .= form::hidden(array($k.'[]'),html::escapeHTML($v2));
                     }
                } else {
-                    $this->form_hidden .= form::hidden(array($k),$v);
+                    $this->form_hidden .= form::hidden(array($k),html::escapeHTML($v));
                }
           }