Skip to content

I
intranet-riskmanagement
Commit 28394302 authored by Frank Bergmann's avatar Frank Bergmann
Browse files
Options

- Improving security by added -limit_to xxx to all im_opt_val calls

parent a6585322
Hide whitespace changes
Inline Side-by-side
Showing with 3 additions and 3 deletions
www/new.tcl
View file @ 28394302
......@@ -216,7 +216,7 @@ if {"delete" == $button_pressed} {
# Fetch variable values from the HTTP session and write to local variables
set url_vars_set [ns_conn form]
foreach var_from_url $vars_from_url {
ad_set_element_value -element $var_from_url [im_opt_val $var_from_url]
ad_set_element_value -element $var_from_url [im_opt_val -limit_to nohtml $var_from_url]
}
set risk_elements [list]
......@@ -241,9 +241,9 @@ ad_form -extend -name riskmanagement_risk -form $risk_elements
# Add DynFields to the form
set field_cnt [im_dynfield::append_attributes_to_form \
-object_id [im_opt_val risk_id] \
-object_id [im_opt_val -limit_to integer risk_id] \
-form_display_mode $form_mode \
-object_subtype_id [im_opt_val risk_type_id] \
-object_subtype_id [im_opt_val -limit_to integer risk_type_id] \
-object_type "im_risk" \
-form_id "riskmanagement_risk" \
]
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment