Skip to content

Commit e834297

Browse files
patched possible XSS point
1 parent 1b9c3b2 commit e834297

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/public/themes/default/contents/header.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -67,7 +67,7 @@
6767
<div class="five wide column">
6868
<form role="search" method="GET">
6969
<div class="ui small fluid action input">
70-
<input type="text" name="s" placeholder="<?php echo (!empty($_GET['s']) ? $_GET['s'] : '[a-z\-_]+.php') ?>">
70+
<input type="text" name="s" placeholder="<?php echo (!empty($_GET['s']) ? htmlentities($_GET['s']) : '[a-z\-_]+.php'); ?>">
7171
<button type="submit" class="ui small button">Search</button>
7272
</div>
7373
</form>

0 commit comments

Comments
 (0)