Ignore:
Timestamp:
Apr 21, 2010, 10:17:07 PM (14 years ago)
Author:
nikrou
Message:

Bug 1621 fixed : CSS vulnerability in register.php
login and mail_address fields must be filtered with htmlspecialchars.
merge from trunk

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/2.0/register.php

    r3214 r5937  
    7777
    7878  'F_ACTION' => 'register.php',
    79   'F_LOGIN' => $login,
    80   'F_EMAIL' => $email
     79  'F_LOGIN' => htmlspecialchars($login, ENT_QUOTES, 'utf-8'),
     80  'F_EMAIL' => htmlspecialchars($email, ENT_QUOTES, 'utf-8')
    8181  ));
    8282
Note: See TracChangeset for help on using the changeset viewer.