Fixed bug #13958: XSS in BE Log (thanks to Georg Ringer)

git-svn-id: https://svn.typo3.org/TYPO3v4/Core/trunk@8349 709f56b5-9817-0410-a4d7-c38de5d9e867

diff --git a/ChangeLog b/ChangeLog
index 0598df3..e23b9a9 100755 (executable)
--- a/ChangeLog
+++ b/ChangeLog
@@ -8,6 +8,7 @@
        * Fixed bug #14950: XSS in t3editor (thanks to Tobias Liebig)
        * Fixed bug #14850: Information disclosure in t3lib_htmlmail (thanks to Georg Ringer)
        * Fixed bug #13961: XSS in impexp (thanks to Georg Ringer)
+       * Fixed bug #13958: XSS in BE Log (thanks to Georg Ringer)
 
 2010-07-27  Steffen Kamper  <steffen@typo3.org>
 

diff --git a/t3lib/class.t3lib_bedisplaylog.php b/t3lib/class.t3lib_bedisplaylog.php
index 757f44a..ea509cb 100644 (file)
--- a/t3lib/class.t3lib_bedisplaylog.php
+++ b/t3lib/class.t3lib_bedisplaylog.php
@@ -204,6 +204,7 @@ class t3lib_BEDisplayLog {
                                $text = str_replace('%s','',$text);
                        }
                }
+               $text = htmlspecialchars($text);
 
                        // Finding the history for the record
                $res = $GLOBALS['TYPO3_DB']->exec_SELECTquery('uid,fieldlist', 'sys_history', 'sys_log_uid='.intval($sys_log_uid));