diff options
author | Scott Ullrich <sullrich@pfsense.org> | 2010-11-10 09:49:21 -0500 |
---|---|---|
committer | Scott Ullrich <sullrich@pfsense.org> | 2010-11-10 09:49:47 -0500 |
commit | daab67a170ddf38a76605e32a56874780e82b62d (patch) | |
tree | 66ad88a3ea2c9cf82f0bf1a5dfc2c4eec3ebfa54 /usr/local/www/diag_logs_filter.php | |
parent | f0ce6758e81a036a6eee144549cbe9e4c72bbe8e (diff) | |
download | pfsense-daab67a170ddf38a76605e32a56874780e82b62d.zip pfsense-daab67a170ddf38a76605e32a56874780e82b62d.tar.gz |
Fix misc XSS issues from davey b
Diffstat (limited to 'usr/local/www/diag_logs_filter.php')
-rwxr-xr-x | usr/local/www/diag_logs_filter.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/usr/local/www/diag_logs_filter.php b/usr/local/www/diag_logs_filter.php index 02b2591..025a7a3 100755 --- a/usr/local/www/diag_logs_filter.php +++ b/usr/local/www/diag_logs_filter.php @@ -73,9 +73,9 @@ if($_GET['dnsip'] or $_POST['dnsip']) { $filtertext = ""; if($_GET['filtertext'] or $_POST['filtertext']) { if($_GET['filtertext']) - $filtertext = $_GET['filtertext']; + $filtertext = htmlspecialchars($_GET['filtertext']); if($_POST['filtertext']) - $filtertext = $_POST['filtertext']; + $filtertext = htmlspecialchars($_POST['filtertext']); } $filter_logfile = "{$g['varlog_path']}/filter.log"; |