← Back to branch summary

~ubuntu-branches/ubuntu/natty/mantis/natty-security

« back to all changes in this revision

Viewing changes to manage_proj_cat_delete.php

  • Committer: Bazaar Package Importer
  • Author(s): Silvia Alvarez
  • Date: 2010-09-05 01:58:01 UTC
  • mfrom: (7.1.6 sid)
  • Revision ID: james.westby@ubuntu.com-20100905015801-as7wtx3ypwyu5o21
Tags: 1.1.8+dfsg-6
http://bugs.debian.org/595510
* debian/patches:
  + Added 08-CVE-2010-2574.diff:  Fix for CVE-2010-2574 XSS 
    vulnerability when deleting categories that have been 
    maliciously named.(Closes: #595510)

Show diffs side-by-side

added added

removed removed

Lines of Context:
manage_proj_cat_delete.php
26
26
        $t_core_path = config_get( 'core_path' );
27
27
 
28
28
        require_once( $t_core_path.'category_api.php' );
 
29
        require_once( $t_core_path.'string_api.php' );
29
30
 
30
31
        form_security_validate( 'manage_proj_cat_delete' );
31
32
 
38
39
 
39
40
        # Confirm with the user
40
41
        helper_ensure_confirmed( lang_get( 'category_delete_sure_msg' ) .
41
 
                '<br/>' . lang_get( 'category' ) . ': ' . $f_category,
 
42
                '<br/>' . lang_get( 'category' ) . ': ' . string_display_line($f_category),
42
43
                lang_get( 'delete_category_button' ) );
43
44
 
44
45
        category_remove( $f_project_id, $f_category );