Merge pull request #1395 from RaspAP/security/sanitize-ajax-posts

Sanitize post with escapeshellcmd()
This commit is contained in:
Bill Zimmerman 2023-09-17 07:44:34 -07:00 committed by GitHub
commit 10637efee3
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -3,7 +3,7 @@
require '../../includes/csrf.php'; require '../../includes/csrf.php';
require_once '../../includes/config.php'; require_once '../../includes/config.php';
$entity = $_POST['entity']; $entity = escapeshellcmd($_POST['entity']);
if (isset($entity)) { if (isset($entity)) {