Changeset 1530:e351294c9550
- Timestamp:
- 10/20/10 16:49:05 (3 years ago)
- Author:
- Thomas Gambet <tgambet@…>
- Branch:
- default
- Message:
-
~ fixed another xss vulnerability
- Files:
-
Legend:
- Unmodified
- Added
- Removed
-
|
r1520
|
r1530
|
|
| 39 | 39 | <p> |
| 40 | 40 | <label title="$uri_title" for="ucn_uri"><span>$uri_label</span> |
| 41 | | <input type="text" name="${param_prefix}uri" id="ucn_uri" size="45" value="#if($param_uri && $param_uri!='referer')$!param_uri#end"/> |
| | 41 | <input type="text" name="${param_prefix}uri" id="ucn_uri" size="45" value="#if($param_uri && $param_uri!='referer')$esc.xml($param_uri)#end"/> |
| 42 | 42 | </label> |
| 43 | 43 | </p> |
| … |
… |
|
| 68 | 68 | <p class="instructions">$instruction-by-input</p> |
| 69 | 69 | <p> |
| 70 | | <textarea id="ucn_text" name="${param_prefix}text" rows="12" cols="70">$!param_text</textarea> |
| | 70 | <textarea id="ucn_text" name="${param_prefix}text" rows="12" cols="70">$esc.xml($!param_text)</textarea> |
| 71 | 71 | #mimeList($current_task) |
| 72 | 72 | </p> |
