mirror/librenms-librenms
1
0
Fork 0
mirror of https://github.com/librenms/librenms.git synced 2024-10-07 16:52:45 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

XSS fixes (#13780)

Browse Source
This commit is contained in:
PipoCanaja
2022-02-13 21:54:58 +01:00
committed by GitHub
parent 41ddce6377
commit 4c9d4eefd8
3 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
includes/html/forms/add-dashboard.inc.php
View File

@@ -34,7 +34,7 @@ if (! Auth::check()) {
$status = 'error';
$message = 'unknown error';
$dashboard_name = trim($_REQUEST['dashboard_name']);
$dashboard_name = trim(strip_tags($_REQUEST['dashboard_name']));
if (! empty($dashboard_name) && ($dash_id = dbInsert(['dashboard_name' => $dashboard_name, 'user_id' => Auth::id()], 'dashboards'))) {
$status = 'ok';

6
includes/html/forms/customoid.inc.php
View File

@@ -17,9 +17,9 @@ $message = '';
$device_id = $_POST['device_id'];
$id = $_POST['ccustomoid_id'];
$action = $_POST['action'];
$name = $_POST['name'];
$oid = $_POST['oid'];
$datatype = $_POST['datatype'];
$name = strip_tags($_POST['name']);
$oid = strip_tags($_POST['oid']);
$datatype = strip_tags($_POST['datatype']);
if (empty(($_POST['unit']))) {
$unit = ['NULL'];
} else {

2
includes/html/forms/transport-groups.inc.php
View File

@@ -35,7 +35,7 @@ $status = 'ok';
$message = '';
$group_id = $vars['group_id'];
$name = $vars['name'];
$name = strip_tags($vars['name']);
$target_members = [];
foreach ((array) $vars['members'] as $target) {