Skip to content

Commit

Permalink
fix xss in confirm.php
Browse files Browse the repository at this point in the history
  • Loading branch information
AndrewPaglusch committed Sep 7, 2021
1 parent 6e68b15 commit 9736da9
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion html/confirm.php
Expand Up @@ -6,7 +6,7 @@
<label style="font-family: 'Enriqueta', arial, serif; line-height: 1.25; margin: 0 0 15px; font-size: 30px; font-weight: bold; padding-bottom: 1%"><?php echo $settings['messages']['confirm_view_secret_header'] ?></label>
<br />
<form method="post" action="./">
<input type="hidden" name="k" value="<?php echo $_GET['k'] ?>">
<input type="hidden" name="k" value="<?php echo htmlspecialchars($_GET['k']) ?>">
<button type="submit" onclick="this.disabled=true;this.form.submit();" class="btn btn-primary w-20 mx-auto"><?php echo $settings['messages']['confirm_view_secret_button'] ?></button>
</form>
</div>
Expand Down

0 comments on commit 9736da9

Please sign in to comment.