mirror of
https://github.com/apache/httpd.git
synced 2025-08-05 16:55:50 +03:00
CVE-2012-3499
add missing html escaping git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1418752 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
@@ -604,7 +604,7 @@ char *util_ald_cache_display_stats(request_rec *r, util_ald_cache_t *cache, char
|
||||
if (id) {
|
||||
buf2 = apr_psprintf(p,
|
||||
"<a href=\"%s?%s\">%s</a>",
|
||||
r->uri,
|
||||
ap_escape_html(r->pool, ap_escape_uri(r->pool, r->uri)),
|
||||
id,
|
||||
name);
|
||||
}
|
||||
|
Reference in New Issue
Block a user