Backupppert/jellyfin
0
0
Fork 0
mirror of https://github.com/jellyfin/jellyfin.git synced 2024-07-21 13:10:45 +02:00
Code Issues Packages Projects Releases Wiki Activity

fixes #1075 - XSS in "Active Devices" Panel of Admin Dashboard

Browse source
This commit is contained in:
Luke 2015-12-25 16:21:18 -05:00
parent da5fc95612
commit 9c3119808b
1 changed files with 12 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
MediaBrowser.Server.Implementations/HttpServer/Security/AuthorizationContext.cs
View file

@ -175,11 +175,22 @@ namespace MediaBrowser.Server.Implementations.HttpServer.Security
if (param.Length == 2)
{
result.Add(param[0], param[1].Trim(new[] { '"' }));
var value = NormalizeValue (param[1].Trim(new[] { '"' }));
result.Add(param[0], value);
}
}
return result;
}
private string NormalizeValue(string value)
{
if (string.IsNullOrWhiteSpace (value))
{
return value;
}
return System.Net.WebUtility.HtmlEncode(value);
}
}
}