mirror/zoneminder
1
0 Fork 0
mirror of https://github.com/ZoneMinder/zoneminder.git synced 2026-10-02 23:45:08 -04:00
Code Issues Packages Projects Releases Wiki Activity

fix: escape names and paths written into html

Browse Source
This commit is contained in:
singhharsh1708 committed 2026-09-06 14:19:38 +05:30
1 parent eae2df6b48
commit f426db28c8
5 files changed
+8 -8
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

web/ajax/modals/storage.php
+3 -3
View File
@@ -59,15 +59,15 @@
<tbody>
<tr>
<th class="text-right " scope="row"><?php echo translate('Name') ?></th>
<td><input type="text" name="newStorage[Name]" value="<?php echo $newStorage->Name() ?>"/></td>
<td><input type="text" name="newStorage[Name]" value="<?php echo validHtmlStr($newStorage->Name()) ?>"/></td>
</tr>
<tr>
<th class="text-right " scope="row"><?php echo translate('Path') ?></th>
<td><input type="text" name="newStorage[Path]" value="<?php echo $newStorage->Path() ?>"/></td>
<td><input type="text" name="newStorage[Path]" value="<?php echo validHtmlStr($newStorage->Path()) ?>"/></td>
</tr>
<tr>
<th class="text-right " scope="row"><?php echo translate('Url') ?></th>
<td><input type="text" name="newStorage[Url]" value="<?php echo $newStorage->Url() ?>"/></td>
<td><input type="text" name="newStorage[Url]" value="<?php echo validHtmlStr($newStorage->Url()) ?>"/></td>
</tr>
<tr>
<th class="text-right " scope="row"><?php echo translate('Server') ?></th>
web/skins/classic/views/_options_controlcaps.php
+1 -1
View File
@@ -58,7 +58,7 @@ foreach( $controls as $control ) {
<tr>
<td class="colMark" data-checkbox="true"></td>
<td class="colId"><?php echo $control['Id'] ?></td>
<td class="colName"><?php echo $control['Name'] ?></td>
<td class="colName"><?php echo validHtmlStr($control['Name']) ?></td>
<td class="colType"><?php echo $control['Type'] ?></td>
<td class="colProtocol"><?php echo validHtmlStr($control['Protocol']) ?></td>
<td class="colCanMove"><?php echo $control['CanMove']?translate('Yes'):translate('No') ?></td>
web/skins/classic/views/event.php
+1 -1
View File
@@ -492,7 +492,7 @@ if (defined('AUDIO_MOTION_ENABLED') && AUDIO_MOTION_ENABLED) echo '
' . PHP_EOL;
?>
<div class="monitorStatus">
<span class="MonitorName"><?php echo $monitor->Name() . " (". translate('ID'). "=" . $monitor->Id() . ")"; ?> </span>
<span class="MonitorName"><?php echo validHtmlStr($monitor->Name()) . " (". translate('ID'). "=" . $monitor->Id() . ")"; ?> </span>
<span class="stream-info-status-track"></span>
</div>
<p id="dvrControls">
web/skins/classic/views/report.php
+1 -1
View File
@@ -54,7 +54,7 @@ getBodyTopHTML();
<tbody>
<tr>
<th class="text-right" scope="row"><?php echo translate('Name') ?></th>
<td><input type="text" name="Report[Name]" value="<?php echo $report->Name() ?>"/></td>
<td><input type="text" name="Report[Name]" value="<?php echo validHtmlStr($report->Name()) ?>"/></td>
</tr>
<tr>
<th class="text-right " scope="row"><?php echo translate('Filter') ?></th>
web/skins/classic/views/timeline.php
+2 -2
View File
@@ -810,8 +810,8 @@ foreach ( array_keys($monEventSlots) as $monitorId ) {
<?php
foreach( array_keys($monEventSlots) as $monitorId ) {
?>
<span class="keyEntry"><?php echo $monitors[$monitorId]->Name() ?>
<div id="keyBox<?php echo $monitorId ?>" class="keyBox monitorColour<?php echo $monitorId ?>" title="<?php echo $monitors[$monitorId]->Name() ?>" style="background-color: <?php echo $monitors[$monitorId]->WebColour() ?>;"></div>
<span class="keyEntry"><?php echo validHtmlStr($monitors[$monitorId]->Name()) ?>
<div id="keyBox<?php echo $monitorId ?>" class="keyBox monitorColour<?php echo $monitorId ?>" title="<?php echo validHtmlStr($monitors[$monitorId]->Name()) ?>" style="background-color: <?php echo $monitors[$monitorId]->WebColour() ?>;"></div>
</span>
<?php
}