upport 1.7.6 security fixes

2014-02-06 09:36:31 +01:00
parent 7fe805cd48
commit 3d7765f066
8 changed files with 55 additions and 12 deletions
--- a/include/admin/entries.inc.php
+++ b/include/admin/entries.inc.php
@@ -168,7 +168,7 @@ switch($serendipity['GET']['adminAction']) {
                  'serendipity[action]'      => 'admin',
                  'serendipity[adminModule]' => 'entries',
                  'serendipity[adminAction]' => 'save',
-                  'serendipity[timestamp]'   => $entry['timestamp']
+                  'serendipity[timestamp]'   => htmlspecialchars($entry['timestamp'])
                ),
                $entry
            );