分页组件xss修复

2f85c518 · gongfuxiang · 98639f65 · 2f85c518
隐藏空白更改
内联并排

Showing with 7 addition and 2 deletion

extend/base/Page.php extend/base/Page.php +7 -2

未找到文件。
--- a/extend/base/Page.php
+++ b/extend/base/Page.php
@@ -75,8 +75,13 @@ class Page
 			{
 				if(!in_array($k, $this->not_fields) && !is_array($v))
 				{
-					if($k == 'page') continue;
-					
+					if($k == 'page')
+					{
+						continue;
+					}
+					$k = htmlspecialchars($k);
+					$v = htmlspecialchars($v);
+
 					if($tmp)
 					{
 						$this->url .= ($state === false) ? '?' : '&';