Faille XSS

This commit is contained in:
fredtempez 2020-12-20 12:10:40 +01:00
parent 5fedce35ed
commit 3b4c6999b6
1 changed files with 1 additions and 1 deletions

View File

@ -275,7 +275,7 @@ class registration extends common {
'<p>' . $messageAdmin . '</p>' .
'<p><strong>Identifiant du compte :</strong> ' . $userId .' (' . $userFirstname . ' ' . $userLastname . ')<br>' .
'<strong>Email :</strong> ' . $userMail . '</p>' .
'<a href="' . helper::baseUrl() . 'user/login/' . str_replace('/', '_', $this->getUrl(0) . '/user') . '">Validation de l\'inscription</a>'
'<a href="' . helper::baseUrl() . 'user/login/' . strip_tags(str_replace('/', '_', $this->getUrl(0) . '/user')) . '">Validation de l\'inscription</a>'
);
}