Mirrors/ICEcoder
2
0
Fork 0
mirror of https://github.com/icecoder/ICEcoder.git synced 2026-03-03 07:13:59 +01:00
Code Issues Packages Projects Releases Wiki Activity

Clean tags from HTTP UA

Browse Source 
Users can alter this, causing an XSS
This commit is contained in:
Matt Pass
2014-04-22 08:06:17 +01:00
parent d6a7db8f3e
commit 493950667b
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
editor.php
View File

@@ -83,7 +83,7 @@ h2 {color: rgba(0,198,255,0.7)}
<span id="serverDT"></span><br><br>
<h2>your device</h2>
<span class="heading">Browser:</span><br>
<?php echo $_SERVER['HTTP_USER_AGENT'];?><br><br>
<?php echo xssClean($_SERVER['HTTP_USER_AGENT'],"tags");?><br><br>
<span class="heading">Your IP:</span><br>
<?php echo $_SERVER['REMOTE_ADDR'];?><br><br>
</div>