Bug techjoomla#105: XSS related bug fixes

sagar-ttpl · Sep 3, 2018 · 4cc83e1 · 4cc83e1
1 parent 791705b
commit 4cc83e1
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/tjreports/administrator/views/tjreports/tmpl/default.php b/tjreports/administrator/views/tjreports/tmpl/default.php
@@ -103,13 +103,13 @@
 						{
 						?>
 						<a href="<?php echo $link; ?>" title="<?php echo JText::_('COM_TJREPORTS_EDIT'); ?>">
-							<?php echo $row->title; ?>
+							<?php echo htmlspecialchars($row->title, ENT_COMPAT, 'UTF-8'); ?>
 						</a>
 						<?php
 						}
 						else
 						{
-							echo $row->title;
+							echo htmlspecialchars($row->title, ENT_COMPAT, 'UTF-8');
 						}
 						?>
 					</td>

diff --git a/tjreports/site/views/reports/tmpl/default.php b/tjreports/site/views/reports/tmpl/default.php
@@ -74,7 +74,7 @@
 		if ($app->isSite() && isset($this->reportData->title))
 		{
 		?>
-			<h2 class="title"><?php echo $this->reportData->title?></h2>
+			<h2 class="title"><?php echo htmlspecialchars($this->reportData->title, ENT_COMPAT, 'UTF-8'); ?></h2>
 		<?php
 		}
 		?>