Fixed XSS, reported by alexander@klink.name

16 years ago · 8f992c32a0
parent 9df4c24204
commit 8f992c32a0
1 changed files with 1 additions and 3 deletions
--- a/www/analyse.php
+++ b/www/analyse.php
@ -30,9 +30,7 @@
 <p><input type="submit" name="process" value="<?=_("Analyse")?>"></p>
 </form>
 <?	} else {
-		echo "<pre>";
+		echo "<pre>".htmlspecialchars(print_r(openssl_x509_parse(openssl_x509_read($_POST['csr'])),true))."</pre>";
 		print_r(openssl_x509_parse(openssl_x509_read($_POST['csr'])));
 		echo "</pre>";
 	}
 	showfooter();
 ?>