line 2913 added urlencode · 7c3890c3bd - THC的仓库

line 2913 added urlencode

There was a cross site scripting vulnerability due to insufficient input sanitation on the $pg parameter.  This patch fixes that issue.

ouɐɹɔs ʞɹɐɯ 12 years ago

parent

281145606b

commit

7c3890c3bd

1 changed files with 1 additions and 1 deletions

Split View Show Diff Stats

						
							+ 1
							
							- 1
						
miner.php
							 
								View File
							
				@@ -2941,7 +2941,7 @@ function display()
			
				  if ($allowcustompages === true)
			
				  {
			
				-	$pg = trim(getparam('pg', true));
			
				+	$pg = urlencode(trim(getparam('pg', true)));
			
				 	if ($pagesonly === true)
			
				 	{
			
				 		if ($pg !== null && $pg !== '')