Bug 276671 Escape GET variables better
Patch by g.maone@informaction.com, r=alanjstr git-svn-id: svn://10.0.0.236/branches/MOZILLA_UPDATE_1_0_BRANCH@167865 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
@@ -118,7 +118,7 @@ if (!$application) {$application = $moz_array[0];}
|
||||
if (!$app_version) {$app_version = $moz_array[1];}
|
||||
|
||||
//If the applicatin is user-defined and not the same as what was detected, ignore the detected version and use the user-defined.
|
||||
if ($_GET["application"] and $_GET[application] !==$moz_array[0]) {$app_version = $_GET["version"]; }
|
||||
if ($_GET["application"] and $_GET["application"] !==$moz_array[0]) {$app_version = escape_string($_GET["version"]); }
|
||||
|
||||
|
||||
} else {
|
||||
|
||||
Reference in New Issue
Block a user