fm/zrd-bibtexbrowser
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Fix XSS vulnerability (#134)

Browse Source
This commit is contained in:
aklerza
2024-10-12 18:58:31 +02:00
committed by GitHub
parent aa886ffb39
commit 2d59cd8384
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bibtexbrowser.php
+2 -1
View File
@@ -296,7 +296,8 @@ function default_message() {
You may browse:<br/> You may browse:<br/>
<?php <?php
foreach (glob("*.bib") as $bibfile) { foreach (glob("*.bib") as $bibfile) {
$url="?bib=".$bibfile; echo '<a href="'.$url.'" rel="nofollow">'.$bibfile.'</a><br/>'; $url="?bib=".urlencode($bibfile);
echo '<a href="'.htmlspecialchars($url, ENT_QUOTES, 'UTF-8').'" rel="nofollow">'.htmlspecialchars($bibfile, ENT_QUOTES, 'UTF-8').'</a><br/>';
} }
echo "</div>"; echo "</div>";
} }