Project

General

Profile

Bug #29179 ยป scheduler_xss.diff

Patch - Georg Ringer, 2011-08-23 07:23

View differences:

typo3/sysext/scheduler/class.tx_scheduler_module.php
// Display information about each service
foreach ($registeredClasses as $class => $classInfo) {
$table[$tr][] = $classInfo['title'];
$table[$tr][] = $classInfo['extension'];
$table[$tr][] = $classInfo['description'];
$table[$tr][] = htmlspecialchars($classInfo['title']);
$table[$tr][] = htmlspecialchars($classInfo['extension']);
$table[$tr][] = htmlspecialchars($classInfo['description']);
$link = $GLOBALS['MCONF']['_'] . '&SET[function]=list&CMD=add&tx_scheduler[class]=' . $class;
$table[$tr][] = '<a href="' . htmlspecialchars($link) . '" title="' . $GLOBALS['LANG']->sL('LLL:EXT:lang/locallang_common.xml:new', TRUE) . '" class="icon">' . t3lib_iconWorks::getSpriteIcon('actions-document-new') . '</a>';
$tr++;
    (1-1/1)