Fixed XSS vulnerability

2020-01-30 17:29:07 +01:00 · 2020-01-30 17:29:07 +01:00 · bf53eb5a6b
parent 1134c041f2
commit bf53eb5a6b
1 changed files with 1 additions and 1 deletions
--- a/pandora_console/include/functions_ui.php
+++ b/pandora_console/include/functions_ui.php
@ -3820,7 +3820,7 @@ function ui_get_url_refresh($params=false, $relative=true, $add_post=true)
                $url .= $key.'['.$k.']='.$v.'&';
            }
        } else {
-            $url .= $key.'='.$value.'&';
+            $url .= $key.'='.io_safe_input($value).'&';
        }
    }