SF.net SVN: postfixadmin: [254] trunk/list-virtual.php

[<Gin...@us...>]

Revision: 254
          http://postfixadmin.svn.sourceforge.net/postfixadmin/?rev=254&view=rev
Author:   GingerDog
Date:     2007-12-02 08:54:15 -0800 (Sun, 02 Dec 2007)

Log Message:
-----------
fix possible XSS hole (security fix)

Modified Paths:
--------------
    trunk/list-virtual.php

Modified: trunk/list-virtual.php
===================================================================
--- trunk/list-virtual.php	2007-12-02 16:53:56 UTC (rev 253)
+++ trunk/list-virtual.php	2007-12-02 16:54:15 UTC (rev 254)
@@ -164,7 +164,8 @@
    }
 }
 
-
+// this is why we need a proper template layer.
+$fDomain = htmlentities($fDomain, ENT_QUOTES);
 include ("templates/header.php");
 include ("templates/menu.php");
 include ("templates/list-virtual.php");


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.