aliens/SemanticScuttle
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fix XSS vulnerability

Browse source 
git-svn-id: https://semanticscuttle.svn.sourceforge.net/svnroot/semanticscuttle/trunk@460 b3834d28-1941-0410-a4f8-b48e95affb8f
This commit is contained in:
cweiske 2009-10-28 22:29:08 +00:00
parent 066085535d
commit 55554bc0f1
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
src/SemanticScuttle/functions.php
View file

@ -49,7 +49,7 @@ function getSortOrder($override = NULL) {
global $defaultOrderBy;
if (isset($_GET['sort'])) {
return $_GET['sort'];
return preg_replace('/[^a-z]/', '', $_GET['sort']);
} else if (isset($override)) {
return $override;
} else {