fix graylog xss (#13931)

This commit is contained in:
Tony Murray
2022-04-19 18:10:02 -05:00
committed by GitHub
parent 9c126572a2
commit cc6112b8fb

View File

@@ -118,8 +118,8 @@ class GraylogController extends SimpleTableController
return [
'severity' => $this->severityLabel($level),
'timestamp' => $displayTime,
'source' => $device ? Url::deviceLink($device) : $message['message']['source'],
'message' => $message['message']['message'] ?? '',
'source' => $device ? Url::deviceLink($device) : htmlspecialchars($message['message']['source']),
'message' => htmlspecialchars($message['message']['message'] ?? ''),
'facility' => is_numeric($facility) ? "($facility) " . __("syslog.facility.$facility") : $facility,
'level' => (is_numeric($level) && $level >= 0) ? "($level) " . __("syslog.severity.$level") : $level,
];