tyler.durden
/
icingaweb2
mirror of https://github.com/Icinga/icingaweb2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Escape resource identifier in monitoring backend form

This commit is contained in:
Johannes Meyer 2025-02-21 10:15:06 +01:00
parent 2e7552391c
commit 33da12cd1e
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
modules/monitoring/application/forms/Config/BackendConfigForm.php
View File

@ -227,7 +227,7 @@ class BackendConfigForm extends ConfigForm
'autosubmit' => true 'autosubmit' => true
) )
); );
$resourceName = isset($formData['resource']) ? $formData['resource'] : $this->getValue('resource'); $resourceName = $this->getView()->escape($formData['resource'] ?? $this->getValue('resource'));
$this->addElement( $this->addElement(
'note', 'note',
'resource_note', 'resource_note',