adam/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-07-05 09:22:21 +02:00
Code Issues Packages Projects Releases Wiki Activity

fixes GHSA-7379-w44f-mfw4 and fixes GHSA-8g2g-6f2c-6h7j protect tag name from XSS

Browse Source
This commit is contained in:
plegall
2024-03-01 11:24:50 +01:00
parent cfd32548bb
commit 917cab5a44
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
admin/include/functions.php
+3
View File
@@ -2365,6 +2365,9 @@ function get_extents($start='')
*/ */
function create_tag($tag_name) function create_tag($tag_name)
{ {
// clean the tag, no html/js allowed in tag name
$tag_name = strip_tags($tag_name);
// does the tag already exists? // does the tag already exists?
$query = ' $query = '
SELECT id SELECT id