From 9cc3bf0f878de7977ac03659b05fbbc0bcc30cf7 Mon Sep 17 00:00:00 2001 From: Regis Houssin Date: Thu, 3 Nov 2011 10:07:09 +0100 Subject: [PATCH 1/6] Fix: security "javascript" is not necessary for send javascript code --- htdocs/main.inc.php | 1 + 1 file changed, 1 insertion(+) diff --git a/htdocs/main.inc.php b/htdocs/main.inc.php index d05c59494b6..c257ecad47e 100644 --- a/htdocs/main.inc.php +++ b/htdocs/main.inc.php @@ -83,6 +83,7 @@ function test_sql_and_script_inject($val, $get) $sql_inj += preg_match('/(\.\.%2f)+/i', $val); // For XSS Injection done by adding javascript with script $sql_inj += preg_match('/