pkgsrc/net/nagios-base/patches/patch-ar
tonnerre 4331013f54 Fix several cross site scripting vulnerabilities in Nagios 2.5
Take over maintainership as suggested by jlam

Approved-by: jlam
2008-03-18 21:53:41 +00:00

12 lines
353 B
Text

$NetBSD: patch-ar,v 1.1 2008/03/18 21:53:41 tonnerre Exp $
--- cgi/statuswrl.c.orig 2006-03-27 17:38:06.000000000 +0200
+++ cgi/statuswrl.c
@@ -239,6 +239,7 @@ int process_cgivars(void){
host_name="all";
else
strcpy(host_name,variables[x]);
+ strip_html_brackets(host_name);
if(!strcmp(host_name,"all"))
show_all_hosts=TRUE;