diff options
Diffstat (limited to 'www-apps/horde/files/horde-3.1.1-xss.diff')
| -rw-r--r-- | www-apps/horde/files/horde-3.1.1-xss.diff | 49 |
1 files changed, 0 insertions, 49 deletions
diff --git a/www-apps/horde/files/horde-3.1.1-xss.diff b/www-apps/horde/files/horde-3.1.1-xss.diff deleted file mode 100644 index 00b36f0522db..000000000000 --- a/www-apps/horde/files/horde-3.1.1-xss.diff +++ /dev/null @@ -1,49 +0,0 @@ ---- horde3-3.1.1.orig/templates/problem/problem.inc -+++ horde3-3.1.1/templates/problem/problem.inc -@@ -31,17 +31,17 @@ - - <tr> - <td class="light rightAlign"><?php echo _("Your Name") ?></td> -- <td><input type="text" tabindex="1" name="name" value="<?php echo $name ?>" size="70" /></td> -+ <td><input type="text" tabindex="1" name="name" value="<?php echo htmlspecialchars($name) ?>" size="70" /></td> - </tr> - - <tr> - <td class="light rightAlign"><?php echo _("Your Email Address") ?></td> -- <td><input type="text" tabindex="2" name="email" value="<?php echo $email ?>" size="70" /></td> -+ <td><input type="text" tabindex="2" name="email" value="<?php echo htmlspecialchars($email) ?>" size="70" /></td> - </tr> - - <tr> - <td class="light rightAlign"><?php echo _("Short Summary") ?></td> -- <td><input type="text" tabindex="3" name="subject" value="<?php echo $subject ?>" size="70" /></td> -+ <td><input type="text" tabindex="3" name="subject" value="<?php echo htmlspecialchars($subject) ?>" size="70" /></td> - </tr> - - <tr> -@@ -49,7 +49,7 @@ - </tr> - <tr> - <td></td> -- <td><textarea tabindex="4" name="message" rows="20" cols="80" wrap="hard"><?php echo $message ?></textarea></td> -+ <td><textarea tabindex="4" name="message" rows="20" cols="80" wrap="hard"><?php echo htmlspecialchars($message) ?></textarea></td> - </tr> - - <tr> ---- horde3-3.1.1.orig/test.php -+++ horde3-3.1.1/test.php -@@ -250,12 +250,12 @@ - exit; - - case 'phpinfo': -- echo '<a href="' . $url . '?mode=test"><< Back to test.php</a>'; -+ echo '<a href="' . htmlspecialchars($url) . '?mode=test"><< Back to test.php</a>'; - phpinfo(); - exit; - - case 'filetest': -- echo '<a href="' . $url . '?mode=test"><< Back to test.php</a>'; -+ echo '<a href="' . htmlspecialchars($url) . '?mode=test"><< Back to test.php</a>'; - ?> - <html> - <body bgcolor="white" text="black"> |