From 7251f587bcc7d9328d7ae8c8d716a8ddf37a3486 Mon Sep 17 00:00:00 2001 From: "Fedor A. Fetisov" Date: Mon, 6 Oct 2014 17:27:59 +0400 Subject: [PATCH] Fix XSS (thanks to Nick M) --- src/mibew/libs/userinfo.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/mibew/libs/userinfo.php b/src/mibew/libs/userinfo.php index dd852815..d69bc6c0 100644 --- a/src/mibew/libs/userinfo.php +++ b/src/mibew/libs/userinfo.php @@ -44,7 +44,7 @@ function get_useragent_version($userAgent) } } } - return $userAgent; + return safe_htmlspecialchars($userAgent); } function get_user_addr($addr)