Merge commit from fork

Advisory fix 1
tltneon · Dec 30, 2024 · 7ecb839 · 7ecb839
2 parents a2755d3 + 709df81
commit 7ecb839
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/lgsl_files/lgsl_list.php b/lgsl_files/lgsl_list.php
@@ -20,7 +20,7 @@
   $uri = $_SERVER['REQUEST_URI'];
 
   if ($lgsl_config['preloader']) {
-    $uri = $_SERVER['HTTP_REFERER'];
+    $uri = htmlspecialchars($_SERVER['HTTP_REFERER'], ENT_QUOTES, 'UTF-8');
   }
 
   $server_list = lgsl_query_group(array("type" => $type, "game" => $game, "page" => $page));
@@ -142,4 +142,4 @@
   $output .= "<div style='text-align:center; font-family:tahoma; font-size:9px; padding: 33px 0 11px 0;'><a href='https://github.com/tltneon/lgsl' style='text-decoration:none'>".lgsl_version()."</a></div>";
 //--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
 if ($lgsl_config['preloader'])
-  echo $output;
+  echo $output;