Files
webgui/emhttp/plugins/dynamix/include/Secure.php
Tom Mortensen b3e355b29b xss hardening
2025-01-22 21:22:32 -08:00

27 lines
910 B
PHP

<?PHP
/* Copyright 2005-2023, Lime Technology
* Copyright 2012-2023, Bergware International.
*
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License version 2,
* as published by the Free Software Foundation.
*
* The above copyright notice and this permission notice shall be included in
* all copies or substantial portions of the Software.
*/
?>
<?
// remove malicious code appended after variable assignment
function unscript($text) {
return trim(preg_split('/[;|&\?=]/',untangle($text))[0]);
}
// remove malicious HTML elements
function untangle($text) {
return strip_tags(html_entity_decode($text));
}
// remove malicious code appended after string variable
function unbundle($text) {
return trim(preg_split('/[;|\?=]/',preg_replace(["#['\"](.*?)['\"];?.+$#","#[()\[\]/\\&`]#"],'',html_entity_decode($text)))[0]);
}
?>