mirror/postfixadmin
0
0
Fork 0
mirror of https://github.com/postfixadmin/postfixadmin.git synced 2024-09-19 19:22:14 +02:00
Code

escape provided url better (fix XSS vuln) - thanks to Flippo Cavallarin for reporting this

Browse Source 
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/branches/postfixadmin-2.3@1322 a1433add-5e2c-0410-b055-b7f2511e0802
This commit is contained in:
David Goodwin 2012-01-10 16:09:38 +00:00
parent 9fb0f040c9
commit 5c4d9e48bd
1 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
templates/edit-vacation.php
View File

@ -2,8 +2,7 @@
<script type="text/javascript">
function newLocation()
{
window.location="<?php print $fCanceltarget; ?>"
window.location= "<?php echo urlencode($fCanceltarget); ?>"
}
</script>
<div id="edit_form">