diff options
| author | Renato Botelho <garga@FreeBSD.org> | 2014-02-14 10:23:37 -0200 |
|---|---|---|
| committer | Renato Botelho <garga@FreeBSD.org> | 2014-02-14 10:23:55 -0200 |
| commit | dbfa041c1024edf6836058147714cca89267f8f0 (patch) | |
| tree | 39ebff1c08c2591e3f8a06e0020982c7180863c6 /usr/local/www/system_firmware_check.php | |
| parent | 5f1c154dbba5a532acb0fdcffce7ed89a4c636c3 (diff) | |
| download | pfsense-dbfa041c1024edf6836058147714cca89267f8f0.zip pfsense-dbfa041c1024edf6836058147714cca89267f8f0.tar.gz | |
Fix #2952, escape necessary chars to avoid xss injection
Diffstat (limited to 'usr/local/www/system_firmware_check.php')
| -rwxr-xr-x | usr/local/www/system_firmware_check.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/usr/local/www/system_firmware_check.php b/usr/local/www/system_firmware_check.php index dbd87ff..0cf9923 100755 --- a/usr/local/www/system_firmware_check.php +++ b/usr/local/www/system_firmware_check.php @@ -181,7 +181,7 @@ if ($g['platform'] == "nanobsd") { $txt .= " " . gettext("NanoBSD Size") . " : " . trim(file_get_contents("/etc/nanosize.txt")) . "\\n"; } $txt .= " " . gettext("Built On") .": ". $current_installed_buildtime . "\\n"; -$txt .= " " . gettext("New version") .": ". $remote_version . "\\n\\n"; +$txt .= " " . gettext("New version") .": ". addslashes($remote_version) . "\\n\\n"; $txt .= " " . gettext("Update source") .": ". $updater_url . "\\n"; update_output_window($txt); ?> |
