Skip to content

Commit 4803eb2

Browse files
committed
xssClean $_POST vars
1 parent 8509a62 commit 4803eb2

1 file changed

Lines changed: 4 additions & 4 deletions

File tree

lib/github-manager.php

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -72,7 +72,7 @@
7272

7373
// Add the new one
7474
if ($_POST['githubLocalPathNEW'] != "" && $_POST['githubRemotePathNEW'] != "") {
75-
$settingsNew .= '"'.$_POST['githubLocalPathNEW'].'",';
75+
$settingsNew .= '"'.xssClean($_POST['githubLocalPathNEW'],"html").'",';
7676
}
7777

7878
// Then set all the old local paths
@@ -88,7 +88,7 @@
8888

8989
// Add the new one
9090
if ($_POST['githubLocalPathNEW'] != "" && $_POST['githubRemotePathNEW'] != "") {
91-
$settingsNew .= '"'.$_POST['githubRemotePathNEW'].'",';
91+
$settingsNew .= '"'.xssClean($_POST['githubRemotePathNEW'],"html").'",';
9292
}
9393

9494
// Then set all the old remote paths
@@ -113,7 +113,7 @@
113113
// Redo the arrays using the form data
114114
for ($i=0; $i<count($oldLocal); $i++) {
115115
if ($_POST['githubLocalPath'.$i] != "") {
116-
$settingsNew .= '"'.$_POST['githubLocalPath'.$i].'",';
116+
$settingsNew .= '"'.xssClean($_POST['githubLocalPath'.$i],"html").'",';
117117
}
118118
}
119119
// Rtrim off the last comma
@@ -126,7 +126,7 @@
126126
// Redo the arrays using the form data
127127
for ($i=0; $i<count($oldRemote); $i++) {
128128
if ($_POST['githubRemotePath'.$i] != "") {
129-
$settingsNew .= '"'.$_POST['githubRemotePath'.$i].'",';
129+
$settingsNew .= '"'.xssClean($_POST['githubRemotePath'.$i],"html").'",';
130130
}
131131
}
132132
// Rtrim off the last comma

0 commit comments

Comments
 (0)