mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

CDATA escape more auth-related fields. Fixes #9327

Browse Source 
(cherry picked from commit 327ad811aa)
This commit is contained in:
jim-p 2019-11-21 16:22:51 -05:00
parent df1de4df25
commit 809e196a0d
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/etc/inc/xmlparse.inc
View File

@ -220,7 +220,7 @@ function is_cdata_entity($ent) {
'descr', 'detail', 'email', 'encryption_password', 'ldap_attr',
'ldap_authcn', 'ldap_basedn', 'ldap_bind',
'ldap_extended_query', 'login_banner', 'organization', 'state',
'text', 'username'
'text', 'username', 'password', 'auth_user', 'auth_pass'
);
/* Check if the entity name starts with any of the strings above */