Skip to content

Commit

Permalink
Browse files Browse the repository at this point in the history
Merge pull request from GHSA-5hg4-r64r-rf83
  • Loading branch information
cedric-anne committed Jan 27, 2022
1 parent 19f13d2 commit 5c3eee6
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion front/entity.form.php
Expand Up @@ -41,7 +41,8 @@
}

if (array_key_exists('custom_css_code', $_POST)) {
$_POST['custom_css_code'] = $_UPOST['custom_css_code'];
// Prevent sanitize process to alter '<', '>' and '&' chars.
$_POST['custom_css_code'] = $DB->escape($_UPOST['custom_css_code']);
}

include (GLPI_ROOT . "/front/dropdown.common.form.php");

0 comments on commit 5c3eee6

Please sign in to comment.