mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

No need to check for HTML in NAT 1to1 or NAT Out descr

Browse Source
This commit is contained in:
Phil Davis 2017-03-17 11:26:48 +05:45
parent 58e8a4fd52
commit f95d6bdc19
No known key found for this signature in database
GPG Key ID: 340A5689A513CA23
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/usr/local/www/firewall_nat_1to1_edit.php
View File

@ -104,6 +104,10 @@ if ($_POST['save']) {
* cannot think he is slick and perform a XSS attack on the unwilling
*/
foreach ($_POST as $key => $value) {
if ($key == 'descr') {
continue;
}
$temp = str_replace(">", "", $value);
$newpost = htmlentities($temp);

4
src/usr/local/www/firewall_nat_out_edit.php
View File

@ -146,6 +146,10 @@ if ($_POST['save']) {
* cannot think he is slick and perform a XSS attack on the unwilling
*/
foreach ($_POST as $key => $value) {
if ($key == 'descr') {
continue;
}
$temp = str_replace(">", "", $value);
$newpost = htmlentities($temp);
if ($newpost <> $temp) {