cacert/cacert-webdb
9
0
Fork 0
Code Issues Pull requests 3 Projects Releases 4 Wiki Activity

Added XSS prevention

Browse source
This commit is contained in:
root 2008-11-23 05:08:59 +00:00
parent 6f397008ee
commit c5e711ba1f
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
pages/account/6.php
View file

@ -38,7 +38,9 @@
{
header("Content-Type: application/x-x509-user-cert");
header("Content-Length: ".strlen($cert));
header('Content-Disposition: inline; filename="'.$row['CN'].'.crt"');
$fname=sanitizeFilename($row['CN']);
if($fname=="") $fname="certificate";
header('Content-Disposition: inline; filename="'.$fname.'.crt"');
echo $cert;
exit;
} else {