Skip to content
Snippets Groups Projects
Commit 36dc8b1c authored by Laurent Destailleur's avatar Laurent Destailleur
Browse files

FIX #4341

parent 0cad938e
Branches
Tags
No related merge requests found
...@@ -96,6 +96,7 @@ function test_sql_and_script_inject($val, $type) ...@@ -96,6 +96,7 @@ function test_sql_and_script_inject($val, $type)
$sql_inj += preg_match('/<script/i', $val); $sql_inj += preg_match('/<script/i', $val);
if (! defined('NOSTYLECHECK')) $sql_inj += preg_match('/<style/i', $val); if (! defined('NOSTYLECHECK')) $sql_inj += preg_match('/<style/i', $val);
$sql_inj += preg_match('/base[\s]+href/i', $val); $sql_inj += preg_match('/base[\s]+href/i', $val);
$sql_inj += preg_match('/<.*onmouseover/i', $val); // onmouseover can be set on img or any html tag like <img title='>' onmouseover=alert(1)>
if ($type == 1) if ($type == 1)
{ {
$sql_inj += preg_match('/javascript:/i', $val); $sql_inj += preg_match('/javascript:/i', $val);
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment