wbrawner/server
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

prevent xss in webfinger

Browse source
This commit is contained in:
Michiel de Jong 2012-05-07 09:26:54 +02:00
parent cde60dba0f
commit 5155f589fd
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
apps/user_webfinger/webfinger.php
View file

@ -26,7 +26,7 @@ $WEBROOT=substr($SUBURI,0,-34);
*/
$request = urldecode($_GET['q']);
$request = strip_tags(urldecode($_GET['q']));
if($_GET['q']) {
$reqParts = explode('@', $request);
$userName = $reqParts[0];