I reviewed the XSS - MEDIUM in files

2015-03-20 14:24:44 -04:00
parent 9c7b459e74
commit 49428ab37e
14 changed files with 130 additions and 20 deletions
--- a/workflow/engine/methods/processes/processes_checkProperties.php
+++ b/workflow/engine/methods/processes/processes_checkProperties.php
@@ -45,7 +45,10 @@ if ($access != 1) {
    }
 }

+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
 $form = $_POST['form'];
+$form = $filter->xssFilterHard($form);

 //$tasUid = $form['TASKS'];
 $tasUid = $form['TAS_PARENT'];