Skip to content
GitLab
Projects
Groups
Snippets
Help
Loading...
Help
What's new
10
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in
Toggle navigation
Open sidebar
project
print
Commits
6771c3f3
Commit
6771c3f3
authored
Apr 04, 2012
by
jcnventura
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Properly escape input URL.
parent
91497c1b
Changes
3
Hide whitespace changes
Inline
Side-by-side
Showing
3 changed files
with
3 additions
and
3 deletions
+3
-3
print.pages.inc
print.pages.inc
+1
-1
print_mail/print_mail.inc
print_mail/print_mail.inc
+1
-1
print_pdf/print_pdf.pages.inc
print_pdf/print_pdf.pages.inc
+1
-1
No files found.
print.pages.inc
View file @
6771c3f3
...
...
@@ -20,7 +20,7 @@ $_print_urls = PRINT_URLS_DEFAULT;
*/
function
print_controller_html
()
{
$args
=
func_get_args
();
$path
=
implode
(
'/'
,
$args
);
$path
=
filter_xss
(
implode
(
'/'
,
$args
)
)
;
$cid
=
isset
(
$_GET
[
'comment'
])
?
(
int
)
$_GET
[
'comment'
]
:
NULL
;
$print
=
print_controller
(
$path
,
$cid
,
PRINT_HTML_FORMAT
);
...
...
print_mail/print_mail.inc
View file @
6771c3f3
...
...
@@ -26,7 +26,7 @@ function print_mail_form($form, &$form_state) {
// Remove the printmail/ prefix
$path_arr
=
explode
(
'/'
,
$_GET
[
'q'
]);
unset
(
$path_arr
[
0
]);
$path
=
implode
(
'/'
,
$path_arr
);
$path
=
filter_xss
(
implode
(
'/'
,
$path_arr
)
)
;
if
(
empty
(
$path
))
{
// If no path was provided, let's try to generate a page for the referer
global
$base_url
;
...
...
print_pdf/print_pdf.pages.inc
View file @
6771c3f3
...
...
@@ -24,7 +24,7 @@ function print_pdf_controller() {
$GLOBALS
[
'conf'
][
'cache'
]
=
FALSE
;
$args
=
func_get_args
();
$path
=
implode
(
'/'
,
$args
);
$path
=
filter_xss
(
implode
(
'/'
,
$args
)
)
;
$cid
=
isset
(
$_GET
[
'comment'
])
?
(
int
)
$_GET
[
'comment'
]
:
NULL
;
if
(
!
empty
(
$path
))
{
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment