Skip to content
Permalink
Browse files Browse the repository at this point in the history
fixed vuln
added \r\n to saveJSON function to prevent sensitive information disclosure
  • Loading branch information
Chad committed Apr 18, 2017
1 parent 6e2ff81 commit 517119d
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion components/install/process.php
Expand Up @@ -33,7 +33,7 @@ function saveFile($file, $data)

function saveJSON($file, $data)
{
$data = "<?php/*|" . json_encode($data) . "|*/?>";
$data = "<?php/*|\r\n" . json_encode($data) . "\r\n|*/?>";
saveFile($file, $data);
}

Expand Down

0 comments on commit 517119d

Please sign in to comment.