mirror of
https://github.com/FH-Complete/FHC-Core.git
synced 2026-07-20 00:12:15 +00:00
Fixed XSS issues
This commit is contained in:
@@ -784,11 +784,12 @@ function getSprache()
|
||||
{
|
||||
if(isset($_COOKIE['sprache']))
|
||||
{
|
||||
$sprache=$_COOKIE['sprache'];
|
||||
// Uses urlencode to avoid XSS issues
|
||||
$sprache = urlencode($_COOKIE['sprache']);
|
||||
}
|
||||
else
|
||||
{
|
||||
$sprache=DEFAULT_LANGUAGE;
|
||||
$sprache = DEFAULT_LANGUAGE;
|
||||
}
|
||||
setSprache($sprache);
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user