fixed vulnerability in load of help iframes

2022-11-03 13:53:10 +01:00 · 2022-11-03 13:53:10 +01:00 · 2c7d7e4044
parent bf6f5479e8
commit 2c7d7e4044
1 changed files with 2 additions and 1 deletions
--- a/pandora_console/include/class/HelpFeedBack.class.php
+++ b/pandora_console/include/class/HelpFeedBack.class.php
@ -94,7 +94,8 @@ class HelpFeedBack extends Wizard
        ui_require_css_file('help_feedback');

        $help_url = get_parameter('b', null);
-        $help_url = base64_decode($help_url);
+        $help_url = io_safe_input(base64_decode($help_url));
+
        if ($help_url === null) {
            echo __('Page not found');
        } else {