From 36dc8b1ce79c972c867b804778c5b780caea8a56 Mon Sep 17 00:00:00 2001
From: Laurent Destailleur <eldy@destailleur.fr>
Date: Fri, 8 Jan 2016 13:57:53 +0100
Subject: [PATCH] FIX #4341
---
htdocs/main.inc.php | 1 +
1 file changed, 1 insertion(+)
diff --git a/htdocs/main.inc.php b/htdocs/main.inc.php
index b45d672b385..b3040cbf03b 100644
--- a/htdocs/main.inc.php
+++ b/htdocs/main.inc.php
@@ -96,6 +96,7 @@ function test_sql_and_script_inject($val, $type)
$sql_inj += preg_match('/<script/i', $val);
if (! defined('NOSTYLECHECK')) $sql_inj += preg_match('/<style/i', $val);
$sql_inj += preg_match('/base[\s]+href/i', $val);
+ $sql_inj += preg_match('/<.*onmouseover/i', $val); // onmouseover can be set on img or any html tag like <img title='>' onmouseover=alert(1)>
if ($type == 1)
{
$sql_inj += preg_match('/javascript:/i', $val);
--
GitLab