WMDE
/
LDAPAccountManager
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

fixed PLA XSS

This commit is contained in:
Roland Gruber 2012-01-26 18:25:55 +00:00
parent 6f8abe9ce5
commit d142f5f430
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
lam/templates/3rdParty/pla/lib/QueryRender.php vendored
View File

@ -455,7 +455,7 @@ class QueryRender extends PageRender {
$this->getAjaxRef($base), $this->getAjaxRef($base),
$this->getAjaxRef($base), $this->getAjaxRef($base),
($show == $this->getAjaxRef($base) ? '#F0F0F0' : '#E0E0E0'), ($show == $this->getAjaxRef($base) ? '#F0F0F0' : '#E0E0E0'),
$base); htmlspecialchars($base));
} }
echo '</tr>'; echo '</tr>';
echo '</table>'; echo '</table>';
@ -503,7 +503,7 @@ class QueryRender extends PageRender {
echo ' ]</small>'; echo ' ]</small>';
echo '<br />'; echo '<br />';
printf('<small>%s: <b>%s</b></small>',_('Base DN'),$base); printf('<small>%s: <b>%s</b></small>',_('Base DN'), htmlspecialchars($base));
echo '<br />'; echo '<br />';
printf('<small>%s: <b>%s</b></small>',_('Filter performed'),htmlspecialchars($this->template->resultsdata[$base]['filter'])); printf('<small>%s: <b>%s</b></small>',_('Filter performed'),htmlspecialchars($this->template->resultsdata[$base]['filter']));