[Lsb-messages] /var/www/bzr/lsb/devel/dbadmin r251: Additional cleanup on commons.inc.

Jeff Licquia licquia at linuxfoundation.org
Thu May 17 00:38:46 UTC 2012


------------------------------------------------------------
revno: 251
committer: Jeff Licquia <licquia at linuxfoundation.org>
branch nick: dbadmin
timestamp: Wed 2012-05-16 20:38:46 -0400
message:
  Additional cleanup on commons.inc.
modified:
  commons.inc
-------------- next part --------------
=== modified file 'commons.inc'
--- a/commons.inc	2012-05-16 23:46:37 +0000
+++ b/commons.inc	2012-05-17 00:38:46 +0000
@@ -1200,7 +1200,7 @@
  */
 function form_lsb_change_link($allowed_keys=array())
 {
-    $link = '?cmd='.$_REQUEST['cmd'];
+    $link = '?cmd='.htmlspecialchars($_REQUEST['cmd']);
     foreach(array_keys($_GET) as $param) {
         // TODO: experiment with regexps here
         // Remember that we could already unset some $_REQUEST keys



More information about the lsb-messages mailing list