I reviewed the XSS - MEDIUM in files

2015-03-20 14:24:44 -04:00
parent 9c7b459e74
commit 49428ab37e
14 changed files with 130 additions and 20 deletions
--- a/workflow/engine/methods/setup/setup.php
+++ b/workflow/engine/methods/setup/setup.php
@@ -29,6 +29,12 @@
 * @date Apr 5th, 2010
 */

+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_GET['i18'] = $filter->xssFilterHard($_GET['i18']);
+$_GET['newSite'] = $filter->xssFilterHard($_GET['newSite']);
+$_GET['module'] = $filter->xssFilterHard($_GET['module']);
+
 if (($RBAC_Response = $RBAC->userCanAccess( "PM_SETUP" )) != 1)
    return $RBAC_Response;