adding xss mitigations to server

2024-04-25 16:54:26 +02:00
parent ce688d382c
commit 8be09ad402
54 changed files with 54 additions and 1727 deletions
--- a/src/server/cyberhex-code/system/secure_zone/php/index.php
+++ b/src/server/cyberhex-code/system/secure_zone/php/index.php
@@ -11,7 +11,7 @@ if (!isset($_SESSION['username']) or !isset($_SESSION["login"])) {
 $username = $_SESSION['username'];
 $perms = $_SESSION["perms"];
 if(isset($_GET["page"])){
-	$page=$_GET["page"];
+	$page=htmlspecialchars($_GET["page"]);
 }else{
 	$page="welcome.php"; //this is actually the Dashboard
 }