Merge pull request from GHSA-cfr5-rqm5-9vhp

Fix/GHSA-cfr5-rqm5-9vhp - Possible XSS in queryads.php
pi-hole · Jul 7, 2022 · b07372b · b07372b
2 parents 803a42f + 5e46f5e
commit b07372b
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/scripts/pi-hole/php/queryads.php b/scripts/pi-hole/php/queryads.php
@@ -27,9 +27,8 @@ function echoEvent($datatext) {
 {
     // Is this a valid domain?
     $url = idn_to_ascii($_GET["domain"]);
-    if(!validDomain($url))
-    {
-        echoEvent("$url is an invalid domain!");
+    if (!validDomain($url)) {
+        echoEvent(htmlentities($url)." is an invalid domain!");
         die();
     }
 }