admin/cacti
1
0 Fork 0
mirror of https://github.com/Cacti/cacti.git synced 2026-11-10 06:23:13 +09:00
Code Issues Packages Projects Releases Wiki Activity

Additional XSS protection related to #1457

Browse Source
This commit is contained in:
cigamit committed 2018-03-17 08:04:30 -05:00
1 parent 24bcaea66c
commit ddaec1c5ac
1 file changed
+1 -1
Download Patch File Download Diff File Expand all files Collapse all files
lib/functions.php
+1 -1
View File
@@ -3383,7 +3383,7 @@ function sanitize_search_string($string) {
* @returns string - the sanitized uri
*/
function sanitize_uri($uri) {
static $drop_char_match = array('^', '$', '<', '>', '`', '\'', '"', '|', '+', '[', ']', '{', '}', ';', '!');
static $drop_char_match = array('^', '$', '<', '>', '`', "'", '"', '|', '+', '[', ']', '{', '}', ';', '!', '(', ')');
static $drop_char_replace = array( '', '', '', '', '', '', '', '', '', '', '', '', '', '', '');
return str_replace($drop_char_match, $drop_char_replace, strip_tags(urldecode($uri)));