mirror of
https://github.com/librenms/librenms.git
synced 2024-10-07 16:52:45 +00:00
Fix unescaped output in ipv6 search page (#15327)
This commit is contained in:
@@ -74,7 +74,7 @@ if ($_POST['interface'] == 'Vlan%') {
|
|||||||
"</select>"+
|
"</select>"+
|
||||||
"</div>"+
|
"</div>"+
|
||||||
"<div class=\"form-group\">"+
|
"<div class=\"form-group\">"+
|
||||||
"<input type=\"text\" name=\"address\" id=\"address\" size=40 value=\"<?php echo $_POST['address']; ?>\" class=\"form-control input-sm\" placeholder=\"IPv6 Address\"/>"+
|
"<input type=\"text\" name=\"address\" id=\"address\" size=40 value=\"<?php echo htmlspecialchars($_POST['address']); ?>\" class=\"form-control input-sm\" placeholder=\"IPv6 Address\"/>"+
|
||||||
"</div>"+
|
"</div>"+
|
||||||
"<button type=\"submit\" class=\"btn btn-default input-sm\">Search</button>"+
|
"<button type=\"submit\" class=\"btn btn-default input-sm\">Search</button>"+
|
||||||
"</form></span></div>"+
|
"</form></span></div>"+
|
||||||
@@ -86,8 +86,8 @@ if ($_POST['interface'] == 'Vlan%') {
|
|||||||
id: "address-search",
|
id: "address-search",
|
||||||
search_type: "ipv6",
|
search_type: "ipv6",
|
||||||
device_id: '<?php echo htmlspecialchars($_POST['device_id']); ?>',
|
device_id: '<?php echo htmlspecialchars($_POST['device_id']); ?>',
|
||||||
interface: '<?php echo $_POST['interface']; ?>',
|
interface: '<?php echo htmlspecialchars($_POST['interface']); ?>',
|
||||||
address: '<?php echo $_POST['address']; ?>'
|
address: '<?php echo htmlspecialchars($_POST['address']); ?>'
|
||||||
};
|
};
|
||||||
},
|
},
|
||||||
url: "ajax_table.php",
|
url: "ajax_table.php",
|
||||||
|
Reference in New Issue
Block a user