fix: htmlspecialchars in AUP template

melanger · web-flow · commit 258191552c30 · 2022-09-15T15:37:37.000+02:00
diff --git a/templates/force-aup-tpl.php b/templates/force-aup-tpl.php
@@ -31,7 +31,7 @@
         }
 ?>
 
-        <input type="hidden" name="StateId" value="<?php echo $_REQUEST['StateId']; ?>">
+        <input type="hidden" name="StateId" value="<?php echo htmlspecialchars($_REQUEST['StateId']); ?>">
 
         <div class="form-group">
             <button type="submit" class="btn btn-lg btn-primary btn-block">

Original file line number	Diff line number	Diff line change
`@@ -31,7 +31,7 @@`
`31`	`31`	`}`
`32`	`32`	`?>`
`33`	`33`
`34`		`- <input type="hidden" name="StateId" value="<?php echo $_REQUEST['StateId']; ?>">`
	`34`	`+ <input type="hidden" name="StateId" value="<?php echo htmlspecialchars($_REQUEST['StateId']); ?>">`
`35`	`35`
`36`	`36`	`<div class="form-group">`
`37`	`37`	`<button type="submit" class="btn btn-lg btn-primary btn-block">`