Commit eea5655e7f02fc987990252bdacf315fc0467496
1 parent
25384bcb
KTS-2178
"cross site scripting" Implemented. Reviewed By: Kevin Fourie git-svn-id: https://kt-dms.svn.sourceforge.net/svnroot/kt-dms/trunk@7005 c91229c3-7414-0410-bfa2-8a42b809f60b
Showing
1 changed file
with
1 additions
and
1 deletions
plugins/rssplugin/templates/RSSPlugin/dashlet.smarty
| ... | ... | @@ -9,7 +9,7 @@ |
| 9 | 9 | {/if} |
| 10 | 10 | {if $feedlist} |
| 11 | 11 | {section name=feed loop=$feedlist} |
| 12 | - <option value='{$feedlist[feed].url}'>{$feedlist[feed].title|sanitize}</option> | |
| 12 | + <option value='{$feedlist[feed].url|sanitize}'>{$feedlist[feed].title|sanitize}</option> | |
| 13 | 13 | {/section} |
| 14 | 14 | {/if} |
| 15 | 15 | </select> | ... | ... |