Congegni
/
sintonia
7
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

CC-4897: XSS exploit on library page 

-fixed
This commit is contained in:
denise 2013-01-30 11:51:27 -05:00
parent d4742577c9
commit 595429e6e5
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
airtime_mvc/application/controllers/LibraryController.php
View File

@ -438,7 +438,7 @@ class LibraryController extends Zend_Controller_Action
$formValues = $this->_getParam('data', null); $formValues = $this->_getParam('data', null);
$formdata = array(); $formdata = array();
foreach ($formValues as $val) { foreach ($formValues as $val) {
$formdata[$val["name"]] = $val["value"]; $formdata[$val["name"]] = htmlspecialchars($val["value"]);
} }
$file->setDbColMetadata($formdata); $file->setDbColMetadata($formdata);