Fixing a scrut issue for xss

This commit is contained in:
laf
2015-03-27 16:59:58 +00:00
parent 79ae1acffa
commit f7a4fc68eb

View File

@@ -63,8 +63,7 @@ var grid = $("#eventlog").bootgrid({
{
return {
id: "eventlog",
string: '<?php echo $_POST['string']; ?>',
device: '<?php echo $_POST['device']; ?>'
device: '<?php echo htmlspecialchars($_POST['device']); ?>'
};
},
url: "/ajax_table.php"