dbxe
/
fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

[security] import pages xss prevention (#6553)

This commit is contained in:
agree 2023-02-14 17:34:53 -05:00 committed by GitHub
parent a229d1e46c
commit 4c29c3c4cf
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
7 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/access_controls/access_control_import.php
View File

@ -164,7 +164,7 @@
//loop through the lines and fields
$x = 0;
foreach ($line_fields as $line_field) {
$line_field = trim(trim($line_field), $enclosure);
$line_field = trim(escape(trim($line_field)), $enclosure);
echo "<tr>\n";
echo " <td width='30%' class='vncell' valign='top' align='left' nowrap='nowrap'>\n";
echo $line_field;

2
app/contacts/contact_import.php
View File

@ -199,7 +199,7 @@
//loop through user columns
$x = 0;
foreach ($line_fields as $line_field) {
$line_field = trim(trim($line_field), $enclosure);
$line_field = trim(escape(trim($line_field)), $enclosure);
echo "<tr>\n";
echo " <td width='30%' class='vncell' valign='top' align='left' nowrap='nowrap'>\n";
echo $line_field;

2
app/destinations/destination_imports.php
View File

@ -709,7 +709,7 @@
//loop through user columns
$x = 0;
foreach ($line_fields as $line_field) {
$line_field = trim(trim($line_field), $enclosure);
$line_field = trim(escape(trim($line_field)), $enclosure);
echo "<tr>\n";
echo " <td class='vncell' valign='top' align='left' nowrap='nowrap'>\n";
echo $line_field;

2
app/devices/device_imports.php
View File

@ -173,7 +173,7 @@
//loop through user columns
$x = 0;
foreach ($line_fields as $line_field) {
$line_field = trim(trim($line_field), $enclosure);
$line_field = trim(escape(trim($line_field)), $enclosure);
echo "<tr>\n";
echo " <td width='30%' class='vncell' valign='top' align='left' nowrap='nowrap'>\n";
//echo " ".$text['label-zzz']."\n";

2
app/extensions/extension_imports.php
View File

@ -170,7 +170,7 @@
//loop through user columns
$x = 0;
foreach ($line_fields as $line_field) {
$line_field = trim(trim($line_field), $enclosure);
$line_field = trim(escape(trim($line_field)), $enclosure);
echo "<tr>\n";
echo " <td width='30%' class='vncell' valign='top' align='left' nowrap='nowrap'>\n";
//echo " ".$text['label-zzz']."\n";

2
app/voicemails/voicemail_imports.php
View File

@ -165,7 +165,7 @@
//loop through user columns
$x = 0;
foreach ($line_fields as $line_field) {
$line_field = trim(trim($line_field), $enclosure);
$line_field = trim(escape(trim($line_field)), $enclosure);
echo "<tr>\n";
echo " <td width='30%' class='vncell' valign='top' align='left' nowrap='nowrap'>\n";
//echo " ".$text['label-zzz']."\n";

2
core/users/user_imports.php
View File

@ -167,7 +167,7 @@
//loop through user columns
$x = 0;
foreach ($line_fields as $line_field) {
$line_field = trim(trim($line_field), $enclosure);
$line_field = trim(escape(trim($line_field)), $enclosure);
echo "<tr>\n";
echo " <td width='30%' class='vncell' valign='top' align='left' nowrap='nowrap'>\n";
//echo " ".$text['label-zzz']."\n";