Skip to content
This repository has been archived by the owner on Jul 3, 2022. It is now read-only.

Commit

Permalink
Fix security issue (szepeviktor#80) (szepeviktor#81)
Browse files Browse the repository at this point in the history 
Fix xss vulnerabilidad (issue szepeviktor#80)
  • Loading branch information
@cesco69 @nigrosimone
cesco69 authored and nigrosimone committed Sep 22, 2016
1 parent 1d6557e commit b904d54
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions inc/options/support/form.php
View file
Original file line number Diff line number Diff line change
Expand Up @@ -18,9 +18,9 @@
<?php echo $this->postbox_footer(); ?>

<p>
<input type="hidden" name="request_type" value="<?php echo $request_type; ?>" />
<input type="hidden" name="request_id" value="<?php echo $request_id; ?>" />
<input type="hidden" name="payment" value="<?php echo $payment; ?>" />
<input type="hidden" name="request_type" value="<?php echo htmlspecialchars($request_type, ENT_QUOTES, 'UTF-8'); ?>" />
<input type="hidden" name="request_id" value="<?php echo htmlspecialchars($request_id, ENT_QUOTES, 'UTF-8'); ?>" />
<input type="hidden" name="payment" value="<?php echo htmlspecialchars($payment, ENT_QUOTES, 'UTF-8'); ?>" />
<?php echo $this->nonce_field('w3tc'); ?>
<input type="submit" name="w3tc_support_request" class="button-primary" value="<?php _e('Submit request', 'w3-total-cache'); ?>" />
<input id="support_cancel" class="button-secondary {nonce: '<?php echo wp_create_nonce('w3tc'); ?>'}" type="button" value="<?php _e('Cancel', 'w3-total-cache'); ?>" />
Expand Down

0 comments on commit b904d54

Please sign in to comment.