xssClean needs HTML context

This commit is contained in:
Matt Pass
2014-08-28 21:28:51 +01:00
parent 86b62d52a0
commit 5f0d7a5a19

View File

@@ -28,7 +28,7 @@ if (!$demoMode && isset($_SESSION['loggedIn']) && $_SESSION['loggedIn'] && isset
</body>
<script>
top.ICEcoder.githubAuthTokenSet = true;
goNext = "'.xssClean($_GET['goNext']).'";
goNext = "'.xssClean($_GET['goNext'],"html").'";
if (goNext=="showManager") {
top.ICEcoder.githubManager();
}
@@ -213,4 +213,4 @@ if (!$demoMode && isset($_SESSION['loggedIn']) && $_SESSION['loggedIn'] && isset
}
}
?>
?>