Fix potential XSS from Username

2022-03-13 08:19:12 -04:00 · 2022-03-13 08:19:12 -04:00 · 62c39ed0d4
parent 0db629fbba
commit 62c39ed0d4
1 changed files with 2 additions and 2 deletions
--- a/web/ajax/modals/logout.php
+++ b/web/ajax/modals/logout.php
@ -77,8 +77,8 @@ while ( $row = $result->fetch(PDO::FETCH_ASSOC) ) {

  echo '
  <tr>
-    <td>'.$user->Username().'</td>
-    <td>'.$_SESSION['remoteAddr'].'</td>
+    <td>'.validHtmlStr($user->Username()).'</td>
+    <td>'.validHtmlStr($_SESSION['remoteAddr']).'</td>
    <td>'.strftime(STRF_FMT_DATETIME_SHORTER, $row['access']).'</td>
  </tr>
 ';