fm/zrd-bibtexbrowser
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

fix XSS pointed by user

Browse Source
This commit is contained in:
Martin Monperrus
2018-01-15 10:07:07 +01:00
parent 8252e6a0cb
commit 249f26eb52
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bibtexbrowser.php
+1 -1
View File
@@ -4748,7 +4748,7 @@ class Dispatcher {
<head> <head>
<meta name="generator" content="bibtexbrowser v__GITHUB__" /> <meta name="generator" content="bibtexbrowser v__GITHUB__" />
<meta http-equiv="Content-Type" content="text/html; charset=<?php echo OUTPUT_ENCODING ?>"/> <meta http-equiv="Content-Type" content="text/html; charset=<?php echo OUTPUT_ENCODING ?>"/>
<title>You are browsing <?php echo $_GET[Q_FILE]; ?> with bibtexbrowser</title> <title>You are browsing <?php echo htmlentities($_GET[Q_FILE], ENT_QUOTES); ?> with bibtexbrowser</title>
</head> </head>
<frameset cols="15%,*"> <frameset cols="15%,*">
<frame name="menu" src="<?php echo '?'.Q_FILE.'='. urlencode($_GET[Q_FILE]).'&amp;menu'; ?>" /> <frame name="menu" src="<?php echo '?'.Q_FILE.'='. urlencode($_GET[Q_FILE]).'&amp;menu'; ?>" />