From 493950667bb645070fb2408353cb78dcbb25a178 Mon Sep 17 00:00:00 2001
From: Matt Pass <matt@mattpass.com>
Date: Tue, 22 Apr 2014 08:06:17 +0100
Subject: [PATCH] Clean tags from HTTP UA

Users can alter this, causing an XSS
---
 editor.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/editor.php b/editor.php
index cb56506..83b53d4 100644
--- a/editor.php
+++ b/editor.php
@@ -83,7 +83,7 @@ h2 {color: rgba(0,198,255,0.7)}
 		<span id="serverDT"></span><br><br>
 		<h2>your device</h2>
 		<span class="heading">Browser:</span><br>
-		<?php echo $_SERVER['HTTP_USER_AGENT'];?><br><br>
+		<?php echo xssClean($_SERVER['HTTP_USER_AGENT'],"tags");?><br><br>
 		<span class="heading">Your IP:</span><br>
 		<?php echo $_SERVER['REMOTE_ADDR'];?><br><br>
 	</div>