mirror of
https://github.com/pandorafms/pandorafms.git
synced 2025-07-28 16:24:54 +02:00
ignore keys on xss manage angent groups
This commit is contained in:
parent
b3a270d0b3
commit
415a8aa8b6
@ -348,7 +348,7 @@ if (($create_group) && (check_acl($config['id_user'], 0, 'PM'))) {
|
|||||||
$propagate = (bool) get_parameter('propagate');
|
$propagate = (bool) get_parameter('propagate');
|
||||||
|
|
||||||
$aviable_name = true;
|
$aviable_name = true;
|
||||||
if (preg_match('<script>', $name)) {
|
if (preg_match('/script/i', $name)) {
|
||||||
$aviable_name = false;
|
$aviable_name = false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -403,7 +403,7 @@ if ($update_group) {
|
|||||||
$other = (string) get_parameter('other');
|
$other = (string) get_parameter('other');
|
||||||
|
|
||||||
$aviable_name = true;
|
$aviable_name = true;
|
||||||
if (preg_match('<script>', $name)) {
|
if (preg_match('/script/i', $name)) {
|
||||||
$aviable_name = false;
|
$aviable_name = false;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -724,8 +724,8 @@ if ($tab == 'tree') {
|
|||||||
[
|
[
|
||||||
'style' => '',
|
'style' => '',
|
||||||
'class' => 'bot',
|
'class' => 'bot',
|
||||||
'alt' => $group['nombre'],
|
'alt' => io_safe_input($group['nombre']),
|
||||||
'title' => $group['nombre'],
|
'title' => io_safe_input($group['nombre']),
|
||||||
],
|
],
|
||||||
false,
|
false,
|
||||||
false,
|
false,
|
||||||
|
Loading…
x
Reference in New Issue
Block a user