We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent cdac1db commit f2bbd37Copy full SHA for f2bbd37
1 file changed
index.php
@@ -406,7 +406,7 @@ function checkpermissions($file)
406
if ($requestedDir != "" && $requestedDir != "photos") {
407
$breadcrumb_navigation = "<div class=\"NavWrapper\">";
408
$breadcrumb_navigation .= "<a href='?dir='>" . $label_home . "</a> $breadcrumb_separator ";
409
- $navitems = explode("/", $_REQUEST['dir']);
+ $navitems = explode("/", htmlspecialchars($_REQUEST['dir']));
410
for ($i = 0; $i < sizeof($navitems); $i++) {
411
if ($i == sizeof($navitems)-1) {
412
$breadcrumb_navigation .= $navitems[$i];
0 commit comments