mike committed changeset [661]
Revision 661,
committed by Michael DiTore
· September 7th, 2009 @ 11:07 PM
Prevent injection of HTML tags by encoding htmlspecialchars in ticker text and in content names (before writing to database). [#31 state:resolved]
4 changed files
-
U
signage/trunk/admin/app/browse/show.php -
U
signage/trunk/admin/app/content/controller.php -
U
signage/trunk/admin/app/content/new_ticker.php -
U
signage/trunk/common/upload.php