Fixed potentially XSS vulnerability

magento · Jun 24, 2018 · 2491b51 · 2491b51
1 parent 0c8221b
commit 2491b51
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/app/code/Magento/Cms/view/adminhtml/templates/browser/content/uploader.phtml b/app/code/Magento/Cms/view/adminhtml/templates/browser/content/uploader.phtml
@@ -101,8 +101,8 @@ require([
             maxFileSize: <?= (int) $block->getFileSizeService()->getMaxFileSize() ?> * 10
         }, {
             action: 'resize',
-            maxWidth: <?= $block->getUploadImageMaxWidth()  ?> ,
-            maxHeight: <?= $block->getUploadImageMaxHeight()  ?>
+            maxWidth: <?= (int) $block->getUploadImageMaxWidth()  ?> ,
+            maxHeight: <?= (int) $block->getUploadImageMaxHeight()  ?>
         }, {
             action: 'save'
         }]