Fixed XSS vulnerability
This commit is contained in:
parent
1134c041f2
commit
bf53eb5a6b
|
@ -3820,7 +3820,7 @@ function ui_get_url_refresh($params=false, $relative=true, $add_post=true)
|
|||
$url .= $key.'['.$k.']='.$v.'&';
|
||||
}
|
||||
} else {
|
||||
$url .= $key.'='.$value.'&';
|
||||
$url .= $key.'='.io_safe_input($value).'&';
|
||||
}
|
||||
}
|
||||
|
||||
|
|
Loading…
Reference in New Issue