fixes #18730, prevent reflected XSS in analytics logger

dojo · Oct 7, 2015 · 18ce703 · 18ce703
1 parent 7c88fa3
commit 18ce703
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/analytics/logger/dojoxAnalytics.php b/analytics/logger/dojoxAnalytics.php
@@ -21,7 +21,7 @@
 
 	fclose($handle);
 
-	$response = '{"eventsReceived": "' . sizeof($items) . '", "id": "' . $id . '"}';
+	$response = '{"eventsReceived": "' . sizeof($items) . '", "id": "' . htmlentities($id) . '"}';
 	if ($_REQUEST["callback"]){
 		print htmlentities($_REQUEST["callback"]) . "(" . $response . ");";
 	}else{