This repository has been archived by the owner on Dec 1, 2022. It is now read-only.

XSS on smarty.get.XXX vars #424

Open

ASponch opened this issue Mar 10, 2018 · 0 comments

Contributor

ASponch commented Mar 10, 2018

There is a lot of failure on templates who uses the {smarty.get.XXX} vars. To fix it : {smarty.get.XXX|escape:"html"}

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.