fixed possible security problem.
This commit is contained in:
parent
de1d5834ac
commit
713811353c
1 changed files with 2 additions and 0 deletions
|
|
@ -358,6 +358,8 @@ sub _createField {
|
|||
my $name = WebGUI::URL::urlize($data->{name});
|
||||
my $f = WebGUI::HTMLForm->new( 'noTable' );
|
||||
|
||||
$session{form}{$name} =~ s/\^.*?\;//gs ; # remove macro's from user input
|
||||
|
||||
SWITCH: for ($data->{type}) {
|
||||
/^text$/ && do {
|
||||
$f->text(
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue