Merge branch 'ent-5403-XSS-vistas-por-Nokia-USA' into 'develop'

Fixed XSS vulnerability See merge request artica/pandorafms!3041
2020-02-04 17:30:21 +01:00 · 2020-02-04 17:30:21 +01:00 · 3342b7dd53
parent 22649e016f bf53eb5a6b
commit 3342b7dd53
1 changed files with 1 additions and 1 deletions
--- a/pandora_console/include/functions_ui.php
+++ b/pandora_console/include/functions_ui.php
@ -3822,7 +3822,7 @@ function ui_get_url_refresh($params=false, $relative=true, $add_post=true)
                $url .= $key.'['.$k.']='.$v.'&';
            }
        } else {
-            $url .= $key.'='.$value.'&';
+            $url .= $key.'='.io_safe_input($value).'&';
        }
    }