tyler.durden
/
pandorafms
mirror of https://github.com/pandorafms/pandorafms.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'ent-5957-XSS-Network-map' into 'develop' 

Solve security issue with field

Closes pandora_enterprise#5957

See merge request artica/pandorafms!3290
This commit is contained in:
Alejandro Fraguas 2020-06-15 10:59:03 +02:00
parent 80774e9942 4040d4b394
commit fae30ca0e2
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
pandora_console/include/class/CustomNetScan.class.php
View File

@ -105,7 +105,7 @@ class CustomNetScan extends Wizard
// from 'validation' page. // from 'validation' page.
if (isset($this->page) === true && $this->page === 1) { if (isset($this->page) === true && $this->page === 1) {
$task_id = get_parameter('task', null); $task_id = get_parameter('task', null);
$taskname = get_parameter('taskname', ''); $taskname = io_safe_input(strip_tags(io_safe_output(get_parameter('taskname'))));
$comment = get_parameter('comment', ''); $comment = get_parameter('comment', '');
$server_id = get_parameter('id_recon_server', ''); $server_id = get_parameter('id_recon_server', '');
$id_group = get_parameter('id_group', ''); $id_group = get_parameter('id_group', '');