mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Encode download parameter before use. Fixes #9508

Browse Source
This commit is contained in:
jim-p 2019-05-09 15:17:35 -04:00
parent 5789a02eab
commit ce77c104ee
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/usr/local/www/services_acb.php
View File

@ -371,7 +371,7 @@ if ($_REQUEST['download']) {
$tab_array[1] = array("Restore", $active, "/services_acb.php");
if ($_REQUEST['download']) {
$tab_array[] = array("Revision", true, "/services_acb.php?download={$_REQUEST['download']}");
$tab_array[] = array("Revision", true, "/services_acb.php?download=" . htmlspecialchars($_REQUEST['download']));
}
$tab_array[] = array("Backup now", false, "/services_acb_backup.php");