Skip to content

Commit

Permalink
Revert "Fix #17870: XSS in adm_config_report.php"
Browse files Browse the repository at this point in the history
This reverts commit b509ab3.

The wrong string API call was used, it should have been
string_attribute() and not string_display_line(). Thanks to
Paul Richards for pointing this out.
  • Loading branch information
dregad committed Nov 15, 2014
1 parent a85db5a commit b02557d
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion adm_config_report.php
Expand Up @@ -486,7 +486,7 @@ function print_option_list_from_array( array $p_array, $p_filter_value ) {
<label for="config-option"><span><?php echo lang_get( 'configuration_option' ) ?></span></label>
<span class="input">
<input type="text" name="config_option"
value="<?php echo string_display_line( $t_edit_option ); ?>"
value="<?php echo $t_edit_option; ?>"
size="64" maxlength="64" />
</span>
<span class="label-style"></span>
Expand Down

0 comments on commit b02557d

Please sign in to comment.