From cee476e88622b5d8856a3913a44bf41f719f9c37 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ermal=20Lu=E7i?= <eri@pfsense.org>
Date: Thu, 7 May 2009 20:37:27 +0000
Subject: Correctly enforce limits on html input.

---
 usr/local/www/system_camanager.php   | 2 +-
 usr/local/www/system_certmanager.php | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

(limited to 'usr')

diff --git a/usr/local/www/system_camanager.php b/usr/local/www/system_camanager.php
index b2d697e..1015cb4 100644
--- a/usr/local/www/system_camanager.php
+++ b/usr/local/www/system_camanager.php
@@ -306,7 +306,7 @@ function method_change() {
 									<tr>
 										<td align="right">Country Code : &nbsp;</td>
 										<td align="left">
-											<input name="dn_country" type="text" class="formfld unknown" size="2" value="<?=htmlspecialchars($pconfig['dn_country']);?>"/>
+											<input name="dn_country" type="text" class="formfld unknown" maxlength="2" size="2" value="<?=htmlspecialchars($pconfig['dn_country']);?>"/>
 											&nbsp;
 											<em>ex:</em>
 											&nbsp;
diff --git a/usr/local/www/system_certmanager.php b/usr/local/www/system_certmanager.php
index dc58aed..cf9035b 100644
--- a/usr/local/www/system_certmanager.php
+++ b/usr/local/www/system_certmanager.php
@@ -486,7 +486,7 @@ function internalca_change() {
 									<tr>
 										<td align="right">Country Code : &nbsp;</td>
 										<td align="left">
-											<input name="dn_country" type="text" class="formfld unknown" size="2" value="<?=htmlspecialchars($pconfig['dn_country']);?>" readonly/>
+											<input name="dn_country" type="text" class="formfld unknown" maxlength="2" size="2" value="<?=htmlspecialchars($pconfig['dn_country']);?>" readonly/>
 										</td>
 									</tr>
 									<tr>
-- 
cgit v1.1