Changeset 5990 for trunk/include/block.class.php

Timestamp:

Apr 29, 2010, 12:44:30 PM (14 years ago)

Author:

plg

Message:

bug 1484: prevent XSS vulnerability, encode url.

improvement: no need to transmit the REQUEST_URI from PHP, Smarty already
knows it.

File:

• trunk/include/block.class.php (modified) (1 diff)

trunk/include/block.class.php

@@ -135 +135 @@
 
     $template->set_filename('menubar', $file);
-    $template->assign(array('U_REDIRECT' => $_SERVER['REQUEST_URI']));
     trigger_action('blockmanager_apply', array(&$this) );