From d74504b919ecc2bacb659287c604f7dbd8709db8 Mon Sep 17 00:00:00 2001 From: Ahmad Gneady Date: Sat, 3 Jul 2021 02:27:15 +0200 Subject: [PATCH] Fix stored XSS in `invoice_items-ajax-cache.php` --- app/admin/incFunctions.php | 2 +- app/admin/pageServerStatus.php | 2 +- app/templates/clients-ajax-cache.php | 4 ++-- app/templates/invoice_items-ajax-cache.php | 4 ++-- app/templates/invoices-ajax-cache.php | 4 ++-- app/templates/item_prices-ajax-cache.php | 4 ++-- app/templates/items-ajax-cache.php | 4 ++-- online-invoicing-system.axp | 2 +- 8 files changed, 13 insertions(+), 13 deletions(-) diff --git a/app/admin/incFunctions.php b/app/admin/incFunctions.php index deb6dec..282d140 100644 --- a/app/admin/incFunctions.php +++ b/app/admin/incFunctions.php @@ -1457,7 +1457,7 @@ function html_attr($str) { function html_attr_tags_ok($str) { // use this instead of html_attr() if you don't want html tags to be escaped $new_str = html_attr($str); - return str_replace(array('<', '>'), array('<', '>'), $new_str); + return str_replace(['<', '>'], ['<', '>'], $new_str); } ######################################################### class Notification{ diff --git a/app/admin/pageServerStatus.php b/app/admin/pageServerStatus.php index 3a14b31..9ea114d 100644 --- a/app/admin/pageServerStatus.php +++ b/app/admin/pageServerStatus.php @@ -1,6 +1,6 @@