2011-01-17 Ingo Renner <ingo@typo3.org>
* Added feature #17033: [reports] Notification Emails for system status updates
2011-01-17 Ingo Renner <ingo@typo3.org>
* Added feature #17033: [reports] Notification Emails for system status updates
+ * Fixed issue #17082: [reports] XSS in reports scheduler job
2011-01-17 Steffen Kamper <steffen@typo3.org>
2011-01-17 Steffen Kamper <steffen@typo3.org>
2011-01-17 Ingo Renner <ingo@typo3.org>
* Added feature #17033: Notification Emails for system status updates
2011-01-17 Ingo Renner <ingo@typo3.org>
* Added feature #17033: Notification Emails for system status updates
+ * Fixed issue #17082: XSS in reports scheduler job
2011-01-13 Ingo Renner <ingo@typo3.org>
2011-01-13 Ingo Renner <ingo@typo3.org>
$fieldHtml = '<input type="text" '
. 'name="tx_scheduler[' . $fieldName . ']" '
. 'id="' . $fieldId . '" '
$fieldHtml = '<input type="text" '
. 'name="tx_scheduler[' . $fieldName . ']" '
. 'id="' . $fieldId . '" '
- . 'value="' . $taskInfo[$fieldName] . '" />';
+ . 'value="' . htmlspecialchars($taskInfo[$fieldName]) . '" />';
$additionalFields[$fieldId] = array(
'code' => $fieldHtml,
$additionalFields[$fieldId] = array(
'code' => $fieldHtml,