Fix XSS vulnerability

This commit is contained in:
slawkens
2023-09-16 10:31:33 +02:00
parent 50983a2b85
commit 5c3b01aca4
3 changed files with 3 additions and 3 deletions

View File

@@ -21,7 +21,7 @@ if(isset($config['boxes']))
<?php
if(PAGE !== 'news') {
if(strpos(URI, 'subtopic=') !== false) {
$tmp = $_REQUEST['subtopic'];
$tmp = escapeHtml($_REQUEST['subtopic']);
if($tmp === 'accountmanagement') {
$tmp = 'accountmanage';
}