Sanitize graph title input (#11919)

This commit is contained in:
Jellyfrog
2020-07-09 13:15:19 -05:00
committed by Tony Murray
parent e2294b57ad
commit 1bb6bd8405
+1 -1
View File
@@ -60,7 +60,7 @@ function graph_error($string)
include 'includes/html/graphs/common.inc.php';
$rrd_options .= ' HRULE:0#555555';
$rrd_options .= " --title='".$string."'";
$rrd_options .= " --title=" . escapeshellarg($string);
rrdtool_graph($graphfile, $rrd_options);