Drupal
/
drupal
mirror of https://git.drupalcode.org/project/drupal.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

- Patch #669060 by Damien Tournoud: fixed SA-CORE-2009-009: contact category name XSS.

merge-requests/26/head
Dries Buytaert 2009-12-28 11:53:49 +00:00
parent 2c24fd4040
commit 438909ba28
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
modules/contact/contact.admin.inc
View File

@ -24,8 +24,8 @@ function contact_category_list() {
// Loop through the categories and add them to the table. // Loop through the categories and add them to the table.
foreach ($categories as $category) { foreach ($categories as $category) {
$rows[] = array( $rows[] = array(
$category->category, check_plain($category->category),
$category->recipients, check_plain($category->recipients),
($category->selected ? t('Yes') : t('No')), ($category->selected ? t('Yes') : t('No')),
l(t('Edit'), 'admin/structure/contact/edit/' . $category->cid), l(t('Edit'), 'admin/structure/contact/edit/' . $category->cid),
l(t('Delete'), 'admin/structure/contact/delete/' . $category->cid), l(t('Delete'), 'admin/structure/contact/delete/' . $category->cid),