1berry/webmin
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add HTML escape for the names of users being deleted

Browse Source
This commit is contained in:
iliajie 2023-05-15 21:34:40 +03:00
parent 87aa2576c2
commit f29d01a7be
No known key found for this signature in database
GPG Key ID: 121E166DD9C821AB
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
useradmin/mass_delete_user.cgi
View File

@ -25,7 +25,7 @@ if ($in{'disable'}) {
if ($in{'confirmed'}) {
foreach $user (@dlist) {
# Show username
print "<b>",&text('dmass_doing', $user->{'user'}),"</b><br>\n";
print "<b>",&text('dmass_doing', &html_escape($user->{'user'})),"</b><br>\n";
print "<ul>\n";
# Run the before command
@ -83,7 +83,7 @@ elsif ($in{'enable'}) {
foreach $user (@dlist) {
# Show username
print "<b>",&text('emass_doing', $user->{'user'}),"</b><br>\n";
print "<b>",&text('emass_doing', &html_escape($user->{'user'})),"</b><br>\n";
print "<ul>\n";
# Run the before command
@ -136,7 +136,7 @@ else {
if ($in{'confirmed'}) {
foreach $user (@dlist) {
# Show username
print "<b>",&text('umass_doing', $user->{'user'}),"</b><br>\n";
print "<b>",&text('umass_doing', &html_escape($user->{'user'})),"</b><br>\n";
print "<ul>\n";
# Run the before command