mirror of
https://github.com/slawkens/myaac.git
synced 2025-10-14 09:44:55 +02:00
Fix XSS vulnerability
This commit is contained in:
@@ -21,7 +21,7 @@ if(isset($config['boxes']))
|
||||
<?php
|
||||
if(PAGE !== 'news') {
|
||||
if(strpos(URI, 'subtopic=') !== false) {
|
||||
$tmp = $_REQUEST['subtopic'];
|
||||
$tmp = escapeHtml($_REQUEST['subtopic']);
|
||||
if($tmp === 'accountmanagement') {
|
||||
$tmp = 'accountmanage';
|
||||
}
|
||||
|
Reference in New Issue
Block a user