Merge pull request #467 from JVMerkle/xss_pull

Fix reflected XSS in bot.php
This commit is contained in:
Newcomer1989
2018-04-05 20:47:48 +02:00
committed by GitHub

View File

@@ -129,7 +129,7 @@ if(isset($_POST['logfilter']) && in_array('debug', $_POST['logfilter'])) {
$inactivefilter .= "DEBUG,";
}
if(isset($_POST['logfilter'][0])) {
$filter2 = $_POST['logfilter'][0];
$filter2 = htmlspecialchars($_POST['logfilter'][0]);
$_SESSION[$rspathhex.'logfilter2'] = $filter2;
}