Skip to content

Commit 3863a38

Browse files
fix(xss): close double-quoted string in aggregate graph_list block
The graph_list interpolation change left the prior single-quote close, leaving the string opened at the <p> segment unterminated and breaking graphs.php with a parse error. Close with a double quote to match the sibling itemlist blocks. Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
1 parent 74dc755 commit 3863a38

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

graphs.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1008,7 +1008,7 @@ function form_actions() {
10081008
print "<td class='textArea'>
10091009
<p>" . __('Click \'Continue\' to create an Aggregate Graph from the selected Graph(s).'). "</p>
10101010
<div class='itemlist'><ul>$graph_list</ul></div>
1011-
</td></tr>';
1011+
</td></tr>";
10121012

10131013
/* list affected data sources */
10141014
print '<tr>';

0 commit comments

Comments
 (0)