mirror of
https://github.com/librenms/librenms.git
synced 2024-10-07 16:52:45 +00:00
Sanitize graph title input (#11919)
This commit is contained in:
@@ -60,7 +60,7 @@ function graph_error($string)
|
||||
include 'includes/html/graphs/common.inc.php';
|
||||
|
||||
$rrd_options .= ' HRULE:0#555555';
|
||||
$rrd_options .= " --title='".$string."'";
|
||||
$rrd_options .= " --title=" . escapeshellarg($string);
|
||||
|
||||
rrdtool_graph($graphfile, $rrd_options);
|
||||
|
||||
|
Reference in New Issue
Block a user