sbrl-github/Pepperminty-Wiki
sbrl-github/Pepperminty-Wiki
1
0
Fork 0
mirror of https://github.com/sbrl/Pepperminty-Wiki.git synced 2024-10-31 21:33:00 +00:00
Code Activity

feaature-watchlist: minor XSS improvements

Browse source
This commit is contained in:
Starbeamrainbowlabs 2021-09-03 01:10:54 +01:00
parent 2844a47f9f
commit 4dda12d195
Signed by: sbrl
GPG key ID: 1BE5172E637709C2
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
modules/feature-watchlist.php
View file

@ -138,7 +138,7 @@ register_module([
http_response_code(403); http_response_code(403);
header("x-status: failed"); header("x-status: failed");
header("x-problem: watchlists-disabled"); header("x-problem: watchlists-disabled");
exit(page_renderer::render_main("Watchlists disabled - $settings->sitename", "<p>Sorry, but watchlists are currently disabled on $settings->sitename. Contact your moderators to learn - their details are at the bottom of every page.</p>")); exit(page_renderer::render_main("Watchlists disabled - $settings->sitename", "<p>Sorry, but watchlists are currently disabled on $settings->sitename. Contact your moderators to ask about this - their details are at the bottom of every page (including this one).</p>"));
} }
if(!$env->is_logged_in) { if(!$env->is_logged_in) {
@ -188,7 +188,7 @@ register_module([
http_response_code(400); http_response_code(400);
header("x-status: failed"); header("x-status: failed");
header("x-problem: watchlist-item-not-found"); header("x-problem: watchlist-item-not-found");
exit(page_renderer::render_main("Watchlist item not found - Error - $settings->sitename", "<p>Oops! The page with the name <em>".htmlentities($env->page)."</em> isn't currently on your watchlist, so it couldn't be removed. Perhaps you already removed it?</p> exit(page_renderer::render_main("Watchlist item not found - Error - $settings->sitename", "<p>Oops! The page with the name <em>$env->page_safe</em> isn't currently on your watchlist, so it couldn't be removed. Perhaps you already removed it?</p>
<p>Try going <a href='?action=watchlist'>back to your watchlist</a>.</p>")); <p>Try going <a href='?action=watchlist'>back to your watchlist</a>.</p>"));
} }
array_splice($env->user_data->watchlist, $index, 1); array_splice($env->user_data->watchlist, $index, 1);