Merge pull request #1887 from YichaoXu/master

fix: mitigate UUF vulnerability by escaping entity with escapeshellarg
This commit is contained in:
Bill Zimmerman
2025-06-25 10:34:48 +02:00
committed by GitHub

View File

@@ -5,7 +5,7 @@ require_once '../../includes/session.php';
require_once '../../includes/config.php';
require_once '../../includes/authenticate.php';
$entity = escapeshellcmd($_POST['entity']);
$entity = escapeshellarg($_POST['entity']);
if (isset($entity)) {