Difuse/luci
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

luci-app-firewall: fix stored XSS in rule- and forward detail pages

Browse source 
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
This commit is contained in:
Jo-Philipp Wich 2019-09-13 13:23:23 +02:00
parent f2c08dc9c1
commit 2a143f4777
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
applications/luci-app-firewall/luasrc/model/cbi/firewall/forward-details.lua
View file

@ -25,7 +25,7 @@ else
if not name or #name == 0 then
name = translate("(Unnamed Entry)")
end
m.title = "%s - %s" %{ translate("Firewall - Port Forwards"), name }
m.title = "%s - %s" %{ translate("Firewall - Port Forwards"), luci.util.pcdata(name) }
end
s = m:section(NamedSection, arg[1], "redirect", "")

2
applications/luci-app-firewall/luasrc/model/cbi/firewall/rule-details.lua
View file

@ -39,7 +39,7 @@ elseif rule_type == "redirect" then
name = "SNAT %s" % name
end
m.title = "%s - %s" %{ translate("Firewall - Traffic Rules"), name }
m.title = "%s - %s" %{ translate("Firewall - Traffic Rules"), luci.util.pcdata(name) }
s = m:section(NamedSection, arg[1], "redirect", "")
s.anonymous = true