WMDE
/
LDAPAccountManager
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

XSS fix (Debian bug 726976)

This commit is contained in:
Roland Gruber 2013-10-21 16:21:38 +00:00
parent 5932cffbd8
commit c5bed144c0
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lam/templates/login.php
View File

@ -114,7 +114,7 @@ else {
$_SESSION['language'] = 'en_GB.utf8:UTF-8:English (Great Britain)';
}
if (isset($_POST['language'])) {
$_SESSION['language'] = $_POST['language']; // Write selected language in session
$_SESSION['language'] = htmlspecialchars($_POST['language']); // Write selected language in session
}
$current_language = explode(":",$_SESSION['language']);
$_SESSION['header'] = "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01 Transitional//EN\" \"http://www.w3.org/TR/html4/loose.dtd\">\n\n";