Changeset 1284:51a4c73719a0

Timestamp:

08/08/13 13:23:13 (10 years ago)

Author:

Dsls

Branch:

2.5

Message:

Fixed potential XSS in admin/post.php

File:

• admin/post.php (modified) (1 diff)

admin/post.php

@@ -352 +352 @@
                $img_status = '';
      }
-     echo ' “'.$post_title.'”'.' '.$img_status;
+     echo ' “'.html::escapeHTML($post_title).'”'.' '.$img_status;
 }
 echo '</span></h2>';