Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/erikdubbelboer/phpRedisAdmin.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorErik Dubbelboer <erik@dubbelboer.com>2021-09-08 10:43:14 +0300
committerErik Dubbelboer <erik@dubbelboer.com>2021-09-08 10:43:14 +0300
commit44b3e162b940e1a299193de497abc566f78ac8fb (patch)
tree7c6e50c51210e64b532b41b7018cacf14e409d09
parentb57e3b0e2f23dd59325fb0026944bba0acebecda (diff)
Fix html injection
-rw-r--r--index.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/index.php b/index.php
index deee99c..6b9bd5c 100644
--- a/index.php
+++ b/index.php
@@ -107,7 +107,7 @@ if($redis) {
?>
<li<?php echo empty($class) ? '' : ' class="'.implode(' ', $class).'"'?>>
- <input type="checkbox" name="checked_keys" value="<?php echo $fullkey?>"/>
+ <input type="checkbox" name="checked_keys" value="<?php echo format_html($fullkey)?>"/>
<a href="?view&amp;s=<?php echo $server['id']?>&amp;d=<?php echo $server['db']?>&amp;key=<?php echo urlencode($fullkey)?>" title="<?php echo format_html($name)?>"><?php echo format_html($name)?><?php if ($len !== false) { ?><span class="info">(<?php echo $len?>)</span><?php } ?></a>
</li>
<?php