From dd1074781318ba7143271543d3ecbcd456670c88 Mon Sep 17 00:00:00 2001
From: Damien <damien.burel@maarch.org>
Date: Thu, 27 Feb 2020 10:53:32 +0100
Subject: [PATCH] FEAT #11823 TIME 0:10 Fix xss
---
apps/maarch_entreprise/reports/report_by_period.php | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/apps/maarch_entreprise/reports/report_by_period.php b/apps/maarch_entreprise/reports/report_by_period.php
index fb52bb9d87a..5ac8921bcc3 100755
--- a/apps/maarch_entreprise/reports/report_by_period.php
+++ b/apps/maarch_entreprise/reports/report_by_period.php
@@ -84,7 +84,7 @@ $content .= '<div id="params">';
while ($res = $stmt->fetchObject()) {
$content .= '<option';
$content .= " value='".$res->type_id."'>";
- $content .= $res->description.'</option>';
+ $content .= functions::xssafe($res->description).'</option>';
}
$content .= '</select>';
$js .= '$j("#doctypes_chosen").chosen({width: "95%", disable_search_threshold: 10, search_contains: true});';
--
GitLab