tyler.durden/pandorafms
1
0
Fork 0
mirror of https://github.com/pandorafms/pandorafms.git synced 2025-09-21 08:58:30 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fixed xss vulnerability

Browse Source
This commit is contained in:
Daniel Maya 2021-08-18 13:57:47 +02:00
parent a1942147e4
commit fc4074b70b
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
pandora_console/include/class/Tree.class.php
View File

@ -593,7 +593,7 @@ class Tree
$module['type'] = 'module'; $module['type'] = 'module';
$module['id'] = (int) $module['id']; $module['id'] = (int) $module['id'];
$module['name'] = io_safe_output($module['name']); $module['name'] = $module['name'];
$module['id_module_type'] = (int) $module['id_tipo_modulo']; $module['id_module_type'] = (int) $module['id_tipo_modulo'];
$module['server_type'] = (int) $module['id_modulo']; $module['server_type'] = (int) $module['id_modulo'];
$module['status'] = $module['estado']; $module['status'] = $module['estado'];
@ -1097,7 +1097,7 @@ class Tree
protected function getThirdLevelSql() protected function getThirdLevelSql()
{ {
// Get the server id // Get the server id.
$serverID = $this->serverID; $serverID = $this->serverID;
$group_acl = $this->getGroupAclCondition(); $group_acl = $this->getGroupAclCondition();

4
pandora_console/include/functions_treeview.php
View File

@ -69,9 +69,9 @@ function treeview_printModuleTable($id_module, $server_data=false, $no_head=fals
// Module name // Module name
if ($module['disabled']) { if ($module['disabled']) {
$cellName = '<em>'.ui_print_truncate_text(io_safe_output($module['nombre']), GENERIC_SIZE_TEXT, true, true, true, '[&hellip;]', 'text-transform: uppercase;').ui_print_help_tip(__('Disabled'), true).'<em>'; $cellName = '<em>'.ui_print_truncate_text($module['nombre'], GENERIC_SIZE_TEXT, true, true, true, '[&hellip;]', 'text-transform: uppercase;').ui_print_help_tip(__('Disabled'), true).'<em>';
} else { } else {
$cellName = ui_print_truncate_text(io_safe_output($module['nombre']), GENERIC_SIZE_TEXT, true, true, true, '[&hellip;]', 'text-transform: uppercase;'); $cellName = ui_print_truncate_text($module['nombre'], GENERIC_SIZE_TEXT, true, true, true, '[&hellip;]', 'text-transform: uppercase;');
} }
$row = []; $row = [];