Sanitizing the user input to prevent a reflected XSS. Thanks to Nico Golde (ngolde.de)

13 years ago · 63d6884e23
parent eadb894eff
commit 63d6884e23
1 changed files with 38 additions and 38 deletions
--- a/apps/gallery/templates/index.php
+++ b/apps/gallery/templates/index.php
@ -14,7 +14,7 @@ div.visible { opacity: 0.8;}
 </style>
 <script type="text/javascript">
-var root = "<?php echo $root; ?>";
+var root = "<?php echo htmlentities($root); ?>";
 function explode(element) {
 	$('div', element).each(function(index, elem) {