Skip to content

Commit

Permalink
Fixed issue #16845: Persistent XSS in browse response
Browse files Browse the repository at this point in the history
Dev: need super admin account
Dev: whe use raw : remind to filter data ....
  • Loading branch information
Shnoulle committed Nov 23, 2020
1 parent cada98b commit 32d448d
Showing 1 changed file with 0 additions and 2 deletions.
2 changes: 0 additions & 2 deletions application/views/admin/responses/listResponses_view.php
Expand Up @@ -141,7 +141,6 @@
'header' => gT("First name"),
'name' => 'tokens.firstname',
'id' => 'firstname',
'type' => 'raw',
'value' => '$data->firstNameForGrid',
'filter' => TbHtml::textField(
'SurveyDynamic[firstname_filter]',
Expand All @@ -154,7 +153,6 @@
$aColumns[] = array(
'header' => gT("Last name"),
'name' => 'tokens.lastname',
'type' => 'raw',
'id' => 'lastname',
'value' => '$data->lastNameForGrid',
'filter' => TbHtml::textField(
Expand Down

1 comment on commit 32d448d

@Shnoulle
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Low security issue : need superadmin account to add XSS

Please sign in to comment.