From fdcb6f50f6760fa6721ae028a02138713a8ecfb5 Mon Sep 17 00:00:00 2001 From: plegall Date: Fri, 9 Aug 2019 15:52:04 +0200 Subject: [PATCH] fixes #1055 prevents XSS on original resize fields --- admin/include/configuration_sizes_process.inc.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/admin/include/configuration_sizes_process.inc.php b/admin/include/configuration_sizes_process.inc.php index cc2d35652..9d936858a 100644 --- a/admin/include/configuration_sizes_process.inc.php +++ b/admin/include/configuration_sizes_process.inc.php @@ -250,7 +250,7 @@ else $template->append( 'sizes', array( - $field => $_POST[$field] + $field => strip_tags($_POST[$field]) // strip_tags prevents from XSS attempt ), true );