ELOG/elog
0
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fixed XSS issue with mail0

Browse Source 
SVN revision: 2391
This commit is contained in:
ritt
2011-03-01 07:35:51 +00:00
parent 4d80eda678
commit c82b16df64
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/elogd.c
+4 -2
View File
@@ -23855,14 +23855,16 @@ void show_elog_entry(LOGBOOK * lbs, char *dec_path, char *command)
rsprintf("<tr><td class=\"notifymsg\" colspan=2>%s</td></tr>\n",
loc("Email notification suppressed"));
} else if (isparam("error")) {
rsprintf("<tr><td class=\"errormsg\" colspan=2>%s</td></tr>\n", getparam("error"));
strencode2(str, getparam("error"), sizeof(str));
rsprintf("<tr><td class=\"errormsg\" colspan=2>%s</td></tr>\n", str);
} else {
for (i = 0;; i++) {
sprintf(str, "mail%d", i);
if (isparam(str)) {
if (i == 0)
rsprintf("<tr><td class=\"notifymsg\" colspan=2>");
rsprintf("%s <b>%s</b><br>\n", loc("Email sent to"), getparam(str));
strencode2(str, getparam(str), sizeof(str));
rsprintf("%s <b>%s</b><br>\n", loc("Email sent to"), str);
} else
break;
}