Fix EZP-20038/EZSA-2013-001: XSS attack possible in content/browse

http://share.ez.no/community-project/security-advisories/ezsa-2013-001-xss-attack-possible-in-content-browse
ezsystems · Aug 8, 2013 · 4c2ffdc · 4c2ffdc
1 parent a27e443
commit 4c2ffdc
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/ezwebin_extension/ezextension/ezwebin/design/ezwebin/templates/content/browse.tpl b/packages/ezwebin_extension/ezextension/ezwebin/design/ezwebin/templates/content/browse.tpl
@@ -65,7 +65,7 @@
 
 
 {if $cancel_action}
-<input type="hidden" name="BrowseCancelURI" value="{$cancel_action}" />
+<input type="hidden" name="BrowseCancelURI" value="{$cancel_action|wash}" />
 {/if}
  <input class="button" type="submit" name="BrowseCancelButton" value="{'Cancel'|i18n( 'design/ezwebin/content/browse' )}" />
 </form>