mirror/librenms-librenms
1
0
Fork 0
mirror of https://github.com/librenms/librenms.git synced 2024-10-07 16:52:45 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix graylog xss (#13931)

Browse Source
This commit is contained in:
Tony Murray
2022-04-19 18:10:02 -05:00
committed by GitHub
parent 9c126572a2
commit cc6112b8fb
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
app/Http/Controllers/Table/GraylogController.php
View File

@@ -118,8 +118,8 @@ class GraylogController extends SimpleTableController
return [ return [
'severity' => $this->severityLabel($level), 'severity' => $this->severityLabel($level),
'timestamp' => $displayTime, 'timestamp' => $displayTime,
'source' => $device ? Url::deviceLink($device) : $message['message']['source'], 'source' => $device ? Url::deviceLink($device) : htmlspecialchars($message['message']['source']),
'message' => $message['message']['message'] ?? '', 'message' => htmlspecialchars($message['message']['message'] ?? ''),
'facility' => is_numeric($facility) ? "($facility) " . __("syslog.facility.$facility") : $facility, 'facility' => is_numeric($facility) ? "($facility) " . __("syslog.facility.$facility") : $facility,
'level' => (is_numeric($level) && $level >= 0) ? "($level) " . __("syslog.severity.$level") : $level, 'level' => (is_numeric($level) && $level >= 0) ? "($level) " . __("syslog.severity.$level") : $level,
]; ];