holm/egroupware
1
1
Fork 0
forked from extern/egroupware
Code Issues Pull Requests Packages Projects Releases Wiki Activity

xss fix, running the content of the address-label-function through strip_html

Browse Source
This commit is contained in:
Ralf Becker 2003-07-02 00:18:11 +00:00
parent ebee2598cf
commit 79a4414e97
1 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
addressbook/inc/class.uiaddressbook.inc.php
View File

@ -999,11 +999,7 @@
$data = $coldata;
}
}
elseif($column == 'label' && $coldata)
{
$data .= $this->contacts->formatted_address($fields[0]['id'],'',False);
}
elseif($column == 'url' && $coldata)
elseif ($column == 'url' && $coldata)
{
$ref = '<a href="' . $coldata . '" target="_new">';
$data = $coldata . '</a>';
@ -1020,6 +1016,11 @@
}
$data = $coldata.'</a>';
}
elseif ($column == 'bday')
{
list($month,$day,$year) = explode('/',$coldata);
$data = $GLOBALS['phpgw']->common->dateformatorder($year,$month,$day,True);
}
else
{
/* But these do not */