PsychoticNinja/Stikked
1
0
Fork 0
mirror of https://github.com/claudehohl/Stikked.git synced 2025-04-26 21:11:15 -05:00
Code Issues Projects Releases Wiki Activity

fixed reflected xss mentioned in https://github.com/claudehohl/Stikked/issues/432

Browse Source
This commit is contained in:
Th3R3p0 2017-08-22 22:36:50 -04:00
parent bd34454758
commit 9e1ad6c36b
6 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
htdocs/themes/bootstrap/views/defaults/paste_form.php
View File

@ -43,7 +43,7 @@
</div> </div>
<div class="control-group"> <div class="control-group">
<div class="controls"> <div class="controls">
<textarea id="code" class="span12" name="code" rows="20" tabindex="4"><?php if(isset($paste_set)){ echo $paste_set; }?></textarea> <textarea id="code" class="span12" name="code" rows="20" tabindex="4"><?php if(isset($paste_set)){ echo htmlspecialchars($paste_set); }?></textarea>
</div> </div>
</div> </div>

2
htdocs/themes/cleanwhite/views/defaults/paste_form.php
View File

@ -48,7 +48,7 @@
<span class="instruction"><a href="#" id="enable_codemirror" data-lang-enablesynhl="<?php echo lang('paste_enablesynhl'); ?>" data-lang-disablesynhl="<?php echo lang('paste_disablesynhl'); ?>"></a></span> <span class="instruction"><a href="#" id="enable_codemirror" data-lang-enablesynhl="<?php echo lang('paste_enablesynhl'); ?>" data-lang-disablesynhl="<?php echo lang('paste_disablesynhl'); ?>"></a></span>
</label> </label>
<textarea id="code" name="code" cols="40" rows="20" tabindex="4"><?php if(isset($paste_set)){ echo $paste_set; }?></textarea> <textarea id="code" name="code" cols="40" rows="20" tabindex="4"><?php if(isset($paste_set)){ echo htmlspecialchars($paste_set); }?></textarea>
</div> </div>
<?php if($this->config->item('enable_captcha') && $this->session->userdata('is_human') === null){ ?> <?php if($this->config->item('enable_captcha') && $this->session->userdata('is_human') === null){ ?>

2
htdocs/themes/default/views/defaults/paste_form.php
View File

@ -43,7 +43,7 @@
<span class="instruction"><a href="#" id="enable_codemirror" data-lang-enablesynhl="<?php echo lang('paste_enablesynhl'); ?>" data-lang-disablesynhl="<?php echo lang('paste_disablesynhl'); ?>"></a></span> <span class="instruction"><a href="#" id="enable_codemirror" data-lang-enablesynhl="<?php echo lang('paste_enablesynhl'); ?>" data-lang-disablesynhl="<?php echo lang('paste_disablesynhl'); ?>"></a></span>
</label> </label>
<textarea id="code" name="code" cols="40" rows="20" tabindex="4"><?php if(isset($paste_set)){ echo $paste_set; }?></textarea> <textarea id="code" name="code" cols="40" rows="20" tabindex="4"><?php if(isset($paste_set)){ echo htmlspecialchars($paste_set); }?></textarea>
</div> </div>

2
htdocs/themes/geocities/views/defaults/paste_form.php
View File

@ -50,7 +50,7 @@
</div> </div>
<div class="control-group"> <div class="control-group">
<div class="controls"> <div class="controls">
<textarea id="code" class="span12" name="code" rows="20" tabindex="4"><?php if(isset($paste_set)){ echo $paste_set; }?></textarea> <textarea id="code" class="span12" name="code" rows="20" tabindex="4"><?php if(isset($paste_set)){ echo htmlspecialchars($paste_set); }?></textarea>
</div> </div>
</div> </div>

2
htdocs/themes/i386/views/defaults/paste_form.php
View File

@ -50,7 +50,7 @@
</div> </div>
<div class="control-group"> <div class="control-group">
<div class="controls"> <div class="controls">
<textarea id="code" class="span12" name="code" rows="20" tabindex="4"><?php if(isset($paste_set)){ echo $paste_set; }?></textarea> <textarea id="code" class="span12" name="code" rows="20" tabindex="4"><?php if(isset($paste_set)){ echo htmlspecialchars($paste_set); }?></textarea>
</div> </div>
</div> </div>

3
htdocs/themes/stikkedizr/views/defaults/paste_form.php
View File

@ -1,5 +1,6 @@
 
<?php echo validation_errors(); ?> <?php echo validation_errors(); ?>
<?php echo "hello"; ?>
<div class="row"> <div class="row">
<div class="col-12 col-sm-12 col-lg-12"> <div class="col-12 col-sm-12 col-lg-12">
@ -49,7 +50,7 @@
</div> </div>
<div class="control-group"> <div class="control-group">
<div class="controls"> <div class="controls">
<textarea id="code" class="form-control" name="code" rows="20" tabindex="4"><?php if(isset($paste_set)){ echo $paste_set; }?></textarea> <textarea id="code" class="form-control" name="code" rows="20" tabindex="4"><?php if(isset($paste_set)){ echo htmlspecialchars($paste_set); }?></textarea>
</div> </div>
</div> </div>