self-hosted/mailcow-dockerized
1
0
Fork 0
mirror of https://github.com/mailcow/mailcow-dockerized.git synced 2025-07-15 01:34:16 +02:00
Code Issues Releases Activity

[Web] escape html of alert messages

Browse Source
This commit is contained in:
FreddleSpl0it
2024-04-03 10:07:36 +02:00
parent 00d4b32a1b
commit 2db8f482db
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
data/web/inc/footer.inc.php
View File

@ -12,7 +12,8 @@ $alertbox_log_parser = alertbox_log_parser($_SESSION);
$alerts = []; $alerts = [];
if (is_array($alertbox_log_parser)) { if (is_array($alertbox_log_parser)) {
foreach ($alertbox_log_parser as $log) { foreach ($alertbox_log_parser as $log) {
$message = strtr($log['msg'], ["\n" => '', "\r" => '', "\t" => '<br>']); $message = htmlspecialchars($log['msg'], ENT_QUOTES);
$message = strtr($message, ["\n" => '', "\r" => '', "\t" => '<br>']);
$alerts[trim($log['type'], '"')][] = trim($message, '"'); $alerts[trim($log['type'], '"')][] = trim($message, '"');
} }
$alert = array_filter(array_unique($alerts)); $alert = array_filter(array_unique($alerts));