SF.net SVN: postfixadmin: [254] trunk/list-virtual.php
Brought to you by:
christian_boltz,
gingerdog
|
From: <Gin...@us...> - 2007-12-02 16:54:10
|
Revision: 254
http://postfixadmin.svn.sourceforge.net/postfixadmin/?rev=254&view=rev
Author: GingerDog
Date: 2007-12-02 08:54:15 -0800 (Sun, 02 Dec 2007)
Log Message:
-----------
fix possible XSS hole (security fix)
Modified Paths:
--------------
trunk/list-virtual.php
Modified: trunk/list-virtual.php
===================================================================
--- trunk/list-virtual.php 2007-12-02 16:53:56 UTC (rev 253)
+++ trunk/list-virtual.php 2007-12-02 16:54:15 UTC (rev 254)
@@ -164,7 +164,8 @@
}
}
-
+// this is why we need a proper template layer.
+$fDomain = htmlentities($fDomain, ENT_QUOTES);
include ("templates/header.php");
include ("templates/menu.php");
include ("templates/list-virtual.php");
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|