Realiza sanitização no valor para evitar XSS

portabilis · Aug 29, 2024 · 348021a · 348021a
1 parent 4c12de0
commit 348021a
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/ieducar/intranet/include/clsCampos.inc.php b/ieducar/intranet/include/clsCampos.inc.php
@@ -1436,6 +1436,7 @@ classe = (classe == \'formmdtd\')? \'formlttd tr_\' + This.nome : \'formmdtd tr_
                         }
 
                         $retorno .= "<input class='{$class}' type='text' name=\"{$nome}\" id=\"{$nome}\" value=\"{$campo_valor}\" size=\"{$componente[4]}\" maxlength=\"{$componente[5]}\" {$evento} {$disabled}> {$componente[7]}";
+                        $campo_valor = ! is_null($campo_valor) ? htmlspecialchars($campo_valor, ENT_QUOTES) : null;
                         break;
 
                     case 'monetario':