Merge pull request from GHSA-9m3v-whmr-pc2q

Cacti · Feb 23, 2024 · a38b904 · a38b904
1 parent 018f8c8
commit a38b904
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/settings.php b/settings.php
@@ -29,6 +29,7 @@
 set_default_action();
 
 get_filter_request_var('tab', FILTER_CALLBACK, array('options' => 'sanitize_search_string'));
+get_filter_request_var('filter', FILTER_CALLBACK, array('options' => 'sanitize_search_string'));
 
 global $disable_log_rotation, $local_db_cnn_id;
 
@@ -63,7 +64,7 @@ function display_settings() {
 	print '<tr><td>';
 	print '<table class="filterTable">';
 	print '<td>' . __('Search') . '</td>';
-	print '<td><input type="text" size="25" id="filter" value="' . get_request_var('filter') . '"></td>';
+	print '<td><input type="text" size="25" id="filter" value="' . html_escape_request_var('filter') . '"></td>';
 	print '<td><span><input type="button" id="clear" value="' . __esc('Clear') . '"></span></td>';
 	print '</tr></table>';
 	print '</td></tr>';