fix $script xss X-(

diff --git a/class/Ethna_ViewClass.php b/class/Ethna_ViewClass.php
index ff39f99..ec9c541 100644 (file)
--- a/class/Ethna_ViewClass.php
+++ b/class/Ethna_ViewClass.php
@@ -421,7 +421,7 @@ class Ethna_ViewClass
             $tmp_session = Ethna_Util::escapeHtml($_SESSION);
             $renderer->setPropByRef('session', $tmp_session);
         }
-        $renderer->setProp('script', basename($_SERVER['PHP_SELF']));
+        $renderer->setProp('script', htmlspecialchars(basename($_SERVER['PHP_SELF']), ENT_QUOTES));
         $renderer->setProp('request_uri', htmlspecialchars($_SERVER['REQUEST_URI'], ENT_QUOTES));
 
         return $renderer;