Merge branch 'ent-6741-Vulnerabilidad-SQL-injection' into 'develop'
Fix vulnerability Closes pandora_enterprise#6741 See merge request artica/pandorafms!3622
This commit is contained in:
commit
d08e60f13a
|
@ -336,6 +336,12 @@ class HostDevices extends Wizard
|
|||
)
|
||||
)
|
||||
);
|
||||
|
||||
// Forbidden chars cleaning.
|
||||
foreach ($network as $key => $singleNetwork) {
|
||||
$network[$key] = preg_replace('/[-()\']/', '', $singleNetwork);
|
||||
}
|
||||
|
||||
unlink($_FILES['network_csv']['tmp_name']);
|
||||
if (empty($network) || is_array($network) === false) {
|
||||
$this->msg = __(
|
||||
|
|
Loading…
Reference in New Issue