Merge pull request #1395 from RaspAP/security/sanitize-ajax-posts

Sanitize post with escapeshellcmd()
RaspAP · Sep 17, 2023 · 10637ef · 10637ef
2 parents 3575d1d + e87e7d1
commit 10637ef
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/ajax/networking/get_wgkey.php b/ajax/networking/get_wgkey.php
@@ -3,7 +3,7 @@
 require '../../includes/csrf.php';
 require_once '../../includes/config.php';
 
-$entity = $_POST['entity'];
+$entity = escapeshellcmd($_POST['entity']);
 
 if (isset($entity)) {