Bug #29179 ยป scheduler_xss.diff
typo3/sysext/scheduler/class.tx_scheduler_module.php | ||
---|---|---|
// Display information about each service
|
||
foreach ($registeredClasses as $class => $classInfo) {
|
||
$table[$tr][] = $classInfo['title'];
|
||
$table[$tr][] = $classInfo['extension'];
|
||
$table[$tr][] = $classInfo['description'];
|
||
$table[$tr][] = htmlspecialchars($classInfo['title']);
|
||
$table[$tr][] = htmlspecialchars($classInfo['extension']);
|
||
$table[$tr][] = htmlspecialchars($classInfo['description']);
|
||
$link = $GLOBALS['MCONF']['_'] . '&SET[function]=list&CMD=add&tx_scheduler[class]=' . $class;
|
||
$table[$tr][] = '<a href="' . htmlspecialchars($link) . '" title="' . $GLOBALS['LANG']->sL('LLL:EXT:lang/locallang_common.xml:new', TRUE) . '" class="icon">' . t3lib_iconWorks::getSpriteIcon('actions-document-new') . '</a>';
|
||
$tr++;
|