From 3c217bbdddb6ff0be5b8ad4f1d53450c1ef6bc09 Mon Sep 17 00:00:00 2001 From: jekkos Date: Wed, 4 Mar 2026 17:53:18 +0000 Subject: [PATCH] Fix XSS vulnerabilities in invoice_email.php view --- app/Views/sales/invoice_email.php | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/app/Views/sales/invoice_email.php b/app/Views/sales/invoice_email.php index 2acf146b7..076bed071 100644 --- a/app/Views/sales/invoice_email.php +++ b/app/Views/sales/invoice_email.php @@ -30,7 +30,7 @@ ' . $error_message . ''; + echo '
' . esc($error_message) . '
'; exit; } ?> @@ -98,7 +98,7 @@ if ($item['print_option'] == PRINT_YES) { ?> - + @@ -179,8 +179,8 @@
- <?= src="data:image/svg+xml;base64,">
- + <?= esc($sale_id) ?>
+