nsinnovations/fusionpbx
2
0
Fork 0
mirror of https://github.com/fusionpbx/fusionpbx.git synced 2026-03-27 02:35:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

[security] import pages xss prevention (#6553)

Browse Source
This commit is contained in:
agree
2023-02-14 17:34:53 -05:00
committed by GitHub
parent a229d1e46c
commit 4c29c3c4cf
7 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
app/access_controls/access_control_import.php
View File

@@ -164,7 +164,7 @@
//loop through the lines and fields
$x = 0;
foreach ($line_fields as $line_field) {
$line_field = trim(trim($line_field), $enclosure);
$line_field = trim(escape(trim($line_field)), $enclosure);
echo "<tr>\n";
echo " <td width='30%' class='vncell' valign='top' align='left' nowrap='nowrap'>\n";
echo $line_field;

2
app/contacts/contact_import.php
View File

@@ -199,7 +199,7 @@
//loop through user columns
$x = 0;
foreach ($line_fields as $line_field) {
$line_field = trim(trim($line_field), $enclosure);
$line_field = trim(escape(trim($line_field)), $enclosure);
echo "<tr>\n";
echo " <td width='30%' class='vncell' valign='top' align='left' nowrap='nowrap'>\n";
echo $line_field;

2
app/destinations/destination_imports.php
View File

@@ -709,7 +709,7 @@
//loop through user columns
$x = 0;
foreach ($line_fields as $line_field) {
$line_field = trim(trim($line_field), $enclosure);
$line_field = trim(escape(trim($line_field)), $enclosure);
echo "<tr>\n";
echo " <td class='vncell' valign='top' align='left' nowrap='nowrap'>\n";
echo $line_field;

2
app/devices/device_imports.php
View File

@@ -173,7 +173,7 @@
//loop through user columns
$x = 0;
foreach ($line_fields as $line_field) {
$line_field = trim(trim($line_field), $enclosure);
$line_field = trim(escape(trim($line_field)), $enclosure);
echo "<tr>\n";
echo " <td width='30%' class='vncell' valign='top' align='left' nowrap='nowrap'>\n";
//echo " ".$text['label-zzz']."\n";

2
app/extensions/extension_imports.php
View File

@@ -170,7 +170,7 @@
//loop through user columns
$x = 0;
foreach ($line_fields as $line_field) {
$line_field = trim(trim($line_field), $enclosure);
$line_field = trim(escape(trim($line_field)), $enclosure);
echo "<tr>\n";
echo " <td width='30%' class='vncell' valign='top' align='left' nowrap='nowrap'>\n";
//echo " ".$text['label-zzz']."\n";

2
app/voicemails/voicemail_imports.php
View File

@@ -165,7 +165,7 @@
//loop through user columns
$x = 0;
foreach ($line_fields as $line_field) {
$line_field = trim(trim($line_field), $enclosure);
$line_field = trim(escape(trim($line_field)), $enclosure);
echo "<tr>\n";
echo " <td width='30%' class='vncell' valign='top' align='left' nowrap='nowrap'>\n";
//echo " ".$text['label-zzz']."\n";

2
core/users/user_imports.php
View File

@@ -167,7 +167,7 @@
//loop through user columns
$x = 0;
foreach ($line_fields as $line_field) {
$line_field = trim(trim($line_field), $enclosure);
$line_field = trim(escape(trim($line_field)), $enclosure);
echo "<tr>\n";
echo " <td width='30%' class='vncell' valign='top' align='left' nowrap='nowrap'>\n";
//echo " ".$text['label-zzz']."\n";