From 6a6156820055a20010a61cd4b615a8ab00df3368 Mon Sep 17 00:00:00 2001 From: Antonin Verdier Date: Tue, 29 Sep 2020 12:34:49 +0200 Subject: [PATCH] Fixed an XSS vulnerability I missed this one when looking into the other vulnerability fixed with https://github.com/Chris92de/AdminServ/pull/6 --- resources/core/adminserv.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/resources/core/adminserv.php b/resources/core/adminserv.php index dc089e2..f995cbd 100644 --- a/resources/core/adminserv.php +++ b/resources/core/adminserv.php @@ -72,7 +72,7 @@ public static function error($text = null){ $_SESSION['error'] = $text; } public static function info($text){ - $_SESSION['info'] = $text; + $_SESSION['info'] = htmlspecialchars($text, ENT_QUOTES, 'UTF-8'); }