Fixed issue #9087: XSS vulnerability

LimeSurvey · Jun 16, 2014 · acb8f3e · acb8f3e
1 parent 526e7bc
commit acb8f3e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/application/views/admin/expressions/test/survey_logic_file.php b/application/views/admin/expressions/test/survey_logic_file.php
@@ -43,7 +43,7 @@
 }
 else {
     $surveyInfo = (array) explode('|', $_REQUEST['sid']);
-    $surveyid = $surveyInfo[0];
+    $surveyid = sanitize_int($surveyInfo[0]);
     $thissurvey=getSurveyInfo($surveyid);
     if (isset($_REQUEST['assessments']))
     {