starred/github-profile-views-counter
1
0
Fork 0
mirror of https://github.com/antonkomarev/github-profile-views-counter.git synced 2026-07-22 05:32:28 -04:00
Code Issues 24 Packages Projects Releases Wiki Activity

🐛 Filter XSS injection (#31)

Browse Source
This commit is contained in:
Jade
2021-06-01 12:34:24 +08:00
committed by GitHub
parent f16b266155
commit f7bb5969cf
3 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
.gitignore vendored
View File

@@ -1,2 +1,3 @@
/vendor/
.env
.idea/

4
public/file-repository.php
View File

@@ -38,6 +38,10 @@ try {
$storagePath = $_ENV['FILE_STORAGE_PATH'];
}
array_walk_recursive($_GET, function (&$input) {
$input = htmlspecialchars($input, ENT_NOQUOTES, 'UTF-8', false);
});
$badgeLabel = $_GET['label'] ?? 'Profile views';
$badgeMessageBackgroundFill = $_GET['color'] ?? 'blue';
$badgeStyle = $_GET['style'] ?? 'flat';

4
public/pdo-repository.php
View File

@@ -42,6 +42,10 @@ try {
$httpUserAgent = $_SERVER['HTTP_USER_AGENT'] ?? '';
array_walk_recursive($_GET, function (&$input) {
$input = htmlspecialchars($input, ENT_NOQUOTES, 'UTF-8', false);
});
$badgeLabel = $_GET['label'] ?? 'Profile views';
$badgeMessageBackgroundFill = $_GET['color'] ?? 'blue';
$badgeStyle = $_GET['style'] ?? 'flat';