mirror of
https://github.com/librenms/librenms.git
synced 2024-10-07 16:52:45 +00:00
Fix improperly escaped output in outages page (#15310)
Fixes XSS reported by https://huntr.dev/users/hainguyen0207
This commit is contained in:
@ -39,8 +39,8 @@ var outages_grid = $("#outages").bootgrid({
|
||||
{
|
||||
return {
|
||||
device: ' . (empty($vars['device']) ? 'null' : (int) $vars['device']) . ',
|
||||
to: "' . addcslashes($vars['to'], '"') . '",
|
||||
from: "' . addcslashes($vars['from'], '"') . '",
|
||||
to: "' . htmlspecialchars($vars['to']) . '",
|
||||
from: "' . htmlspecialchars($vars['from']) . '",
|
||||
};
|
||||
},
|
||||
url: "' . url('/ajax/table/outages') . '"
|
||||
|
Reference in New Issue
Block a user