Drupal
/
drupal
mirror of https://git.drupalcode.org/project/drupal.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

#324880: SA-2008-067 (#324824): Fix XSS vulberability in book administration page.

merge-requests/26/head
Angie Byron 2008-11-08 19:33:53 +00:00
parent 4e369a6b7f
commit d2331ebdf7
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
modules/book/book.admin.inc
View File

@ -173,8 +173,8 @@ function _book_admin_table($node, &$form) {
* @see book_admin_edit() * @see book_admin_edit()
*/ */
function _book_admin_table_tree($tree, &$form) { function _book_admin_table_tree($tree, &$form) {
foreach ($tree as $key => $data) { foreach ($tree as $data) {
$form[$key] = array( $form['book-admin-' . $data['link']['nid']] = array(
'#item' => $data['link'], '#item' => $data['link'],
'nid' => array('#type' => 'value', '#value' => $data['link']['nid']), 'nid' => array('#type' => 'value', '#value' => $data['link']['nid']),
'depth' => array('#type' => 'value', '#value' => $data['link']['depth']), 'depth' => array('#type' => 'value', '#value' => $data['link']['depth']),