diff options
| author | Renato Botelho <garga@FreeBSD.org> | 2014-02-14 10:23:37 -0200 |
|---|---|---|
| committer | Renato Botelho <garga@FreeBSD.org> | 2014-02-14 10:24:32 -0200 |
| commit | d210dddff39462019bc9b349cb3322a92d88feca (patch) | |
| tree | e9789c7429e4aa5e804fa554cf237096d9933387 /usr/local/www | |
| parent | 429f454de6d9cadf0f1193f776e9385531c9f3ae (diff) | |
| download | pfsense-d210dddff39462019bc9b349cb3322a92d88feca.zip pfsense-d210dddff39462019bc9b349cb3322a92d88feca.tar.gz | |
Fix #2952, escape necessary chars to avoid xss injection
Diffstat (limited to 'usr/local/www')
| -rwxr-xr-x | usr/local/www/system_firmware_check.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/usr/local/www/system_firmware_check.php b/usr/local/www/system_firmware_check.php index dbd87ff..0cf9923 100755 --- a/usr/local/www/system_firmware_check.php +++ b/usr/local/www/system_firmware_check.php @@ -181,7 +181,7 @@ if ($g['platform'] == "nanobsd") { $txt .= " " . gettext("NanoBSD Size") . " : " . trim(file_get_contents("/etc/nanosize.txt")) . "\\n"; } $txt .= " " . gettext("Built On") .": ". $current_installed_buildtime . "\\n"; -$txt .= " " . gettext("New version") .": ". $remote_version . "\\n\\n"; +$txt .= " " . gettext("New version") .": ". addslashes($remote_version) . "\\n\\n"; $txt .= " " . gettext("Update source") .": ". $updater_url . "\\n"; update_output_window($txt); ?> |
