Fix unescaped output in ipv6 search page (#15327)

This commit is contained in:
Tony Murray
2023-09-15 16:05:08 -05:00
committed by GitHub
parent ba67d886c8
commit 8fd8d9b06a

View File

@@ -74,7 +74,7 @@ if ($_POST['interface'] == 'Vlan%') {
"</select>"+ "</select>"+
"</div>"+ "</div>"+
"<div class=\"form-group\">"+ "<div class=\"form-group\">"+
"<input type=\"text\" name=\"address\" id=\"address\" size=40 value=\"<?php echo $_POST['address']; ?>\" class=\"form-control input-sm\" placeholder=\"IPv6 Address\"/>"+ "<input type=\"text\" name=\"address\" id=\"address\" size=40 value=\"<?php echo htmlspecialchars($_POST['address']); ?>\" class=\"form-control input-sm\" placeholder=\"IPv6 Address\"/>"+
"</div>"+ "</div>"+
"<button type=\"submit\" class=\"btn btn-default input-sm\">Search</button>"+ "<button type=\"submit\" class=\"btn btn-default input-sm\">Search</button>"+
"</form></span></div>"+ "</form></span></div>"+
@@ -86,8 +86,8 @@ if ($_POST['interface'] == 'Vlan%') {
id: "address-search", id: "address-search",
search_type: "ipv6", search_type: "ipv6",
device_id: '<?php echo htmlspecialchars($_POST['device_id']); ?>', device_id: '<?php echo htmlspecialchars($_POST['device_id']); ?>',
interface: '<?php echo $_POST['interface']; ?>', interface: '<?php echo htmlspecialchars($_POST['interface']); ?>',
address: '<?php echo $_POST['address']; ?>' address: '<?php echo htmlspecialchars($_POST['address']); ?>'
}; };
}, },
url: "ajax_table.php", url: "ajax_table.php",