tyler.durden/pandorafms
1
0
Fork 0
mirror of https://github.com/pandorafms/pandorafms.git synced 2025-07-31 01:35:36 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'ent-5956-xss-manage-agent-group' into 'develop'

Browse Source 
ignore keys on xss manage angent groups

See merge request artica/pandorafms!3322
This commit is contained in:
Alejandro Fraguas 2020-06-22 09:25:05 +02:00
commit 487ab4e86a
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
pandora_console/godmode/groups/group_list.php
View File

@ -348,7 +348,7 @@ if (($create_group) && (check_acl($config['id_user'], 0, 'PM'))) {
$propagate = (bool) get_parameter('propagate'); $propagate = (bool) get_parameter('propagate');
$aviable_name = true; $aviable_name = true;
if (preg_match('<script>', $name)) { if (preg_match('/script/i', $name)) {
$aviable_name = false; $aviable_name = false;
} }
@ -403,7 +403,7 @@ if ($update_group) {
$other = (string) get_parameter('other'); $other = (string) get_parameter('other');
$aviable_name = true; $aviable_name = true;
if (preg_match('<script>', $name)) { if (preg_match('/script/i', $name)) {
$aviable_name = false; $aviable_name = false;
} }
@ -724,8 +724,8 @@ if ($tab == 'tree') {
[ [
'style' => '', 'style' => '',
'class' => 'bot', 'class' => 'bot',
'alt' => $group['nombre'], 'alt' => io_safe_input($group['nombre']),
'title' => $group['nombre'], 'title' => io_safe_input($group['nombre']),
], ],
false, false,
false, false,