Mirrors/ICEcoder
2
0
Fork 0
mirror of https://github.com/icecoder/ICEcoder.git synced 2026-03-21 15:57:06 +01:00
Code Issues Packages Projects Releases Wiki Activity

xssClean on 4 x $_GET instances

Browse Source
This commit is contained in:
Matt Pass
2016-03-09 19:23:35 +00:00
parent e5dcd02b62
commit c93c3b3785
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
lib/bug-files-check.php
View File

@@ -5,9 +5,9 @@ include_once("settings-common.php");
$text = $_SESSION['text'];
$t = $text['bug-files-check'];
$files = explode(",",str_replace("|","/",$_GET['files']));
$filesSizesSeen = explode(",",$_GET['filesSizesSeen']);
$maxLines = $_GET['maxLines'];
$files = explode(",",str_replace("|","/",xssClean($_GET['files'],"html")));
$filesSizesSeen = explode(",",xssClean($_GET['filesSizesSeen'],"html"));
$maxLines = xssClean($_GET['maxLines'],"html");
$result = "ok";
@@ -28,7 +28,7 @@ if ($result != "error") {
for ($i=0; $i<count($files); $i++) {
// If we have set a filesize value previously and it's different to now, there's new bugs
$fileSizesSeenArray = explode(",",$_GET['filesSizesSeen']);
$fileSizesSeenArray = explode(",",xssClean($_GET['filesSizesSeen'],"html"));
if ($fileSizesSeenArray[$i]!="null" && $fileSizesSeenArray[$i] != $filesSizesSeen[$i]) {
$result = "bugs";
$filesWithNewBugs++;