webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-27 19:23:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'ms/xss' into next

Browse Source
This commit is contained in:
Michael Tremer
2013-08-21 17:40:44 +02:00
parent e4d79ba496 5ba9e6606e
commit df05a856cd
2 changed files with 11 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
config/cfgroot/header.pl
View File

@@ -12,6 +12,7 @@
package Header;
use CGI();
use HTML::Entities();
use Socket;
use Time::Local;
@@ -305,16 +306,16 @@ sub IpInSubnet
return (($ip >= $start) && ($ip <= $end));
}
sub cleanhtml
{
sub escape($) {
my $s = shift;
return HTML::Entities::encode_entities($s);
}
sub cleanhtml {
my $outstring =$_[0];
$outstring =~ tr/,/ / if not defined $_[1] or $_[1] ne 'y';
$outstring =~ s/&/&amp;/g;
$outstring =~ s/\'/&#039;/g;
$outstring =~ s/\"/&quot;/g; #" This is just a workaround for the syntax highlighter
$outstring =~ s/</&lt;/g;
$outstring =~ s/>/&gt;/g;
return $outstring;
return escape($outstring);
}
sub connectionstatus