genuineparts/alltube
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge tag '3.0.1' into develop

Browse source 
Fixed an open redirect vulnerability that could be used to construct an URL redirecting to an arbitraty domain
This commit is contained in:
Pierre Rudloff 2022-02-20 13:34:53 +01:00
commit bfaea0e381
3 changed files with 22 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

2
templates/inc/logo.tpl
View file

@ -1,5 +1,5 @@
<h1 class="logobis">
<a class="logocompatible" href="{base_url}">
<a class="logocompatible" href="{path_for name="index"}">
<span class="logocompatiblemask">
{html_image file='img/logocompatiblemask.png' path_prefix={base_url}|cat:'/' alt=$config->appName}
</span>