Commit 78bf1d29 authored by Frank Bergmann's avatar Frank Bergmann

- Fixed link with XSS reflected return_url

parent b754e2ec
......@@ -510,15 +510,6 @@ if {$add_absences_p} {
"
}
if {$return_url ne "" && ![regexp {^/intranet-timesheet2/hours/index} $return_url]} {
append left_navbar_html "
<li><a href='$return_url'>[_ intranet-timesheet2.lt_Return_to_previous_pa]</a></li>
"
}
# ----------------------------------------------------------
# Do we have to show administration links?
# ---------------------------------------------------------------
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment