MantisBT: master-1.2.x 21299299

Author Committer Branch Timestamp Parent
dhx dhx master-1.2.x 2009-12-06 09:49 master-1.2.x f3d56d77
Affected Issues  0011262: XSS issues in various print_X_option_list functions (OS, platform, etc)
Changeset

Fix 0011262: XSS issues in various print_X_option_list functions

In some of the print_X_option_list functions from print_api.php, certain
strings (many user definable, others project manager definable) are not
sanitised before being used in the dropdown option lists. Examples are
the OS, platform, version and some project dropdown option lists. These
problems can be reproduced by using return_dynamic_filters.php to output
a vulnerable dropdown list of your choosing.

mod - core/print_api.php Diff File