Project

General

Profile

« Previous | Next » 

Revision 1833

Added by Dietmar over 11 years ago

  1. security fix CRLF injection/HTTP response splitting

View differences:

login.htt
40 40
<!-- BEGIN show_smart_login_block -->
41 41
<tr>
42 42
	<td>&nbsp;</td>
43
	<td colspan="2">
44
		<input type="checkbox" name="remember" id="remember" value="true"/>
45
		<label for="remember">{TEXT_REMEMBER_ME}</label>
46
	</td>
43
	<td>&nbsp;</td>
47 44
</tr>
48 45
<!-- END show_smart_login_block -->
49 46
<tr class="submit">
......
54 51
	<p><input type="reset" name="reset" value="{TEXT_RESET}" /></p>
55 52
	</td>
56 53
	<td>
57
	<p><button type="button" value="cancel" onclick="javascript:window.location='{WB_URL}/';" >{TEXT_CANCEL}</button></p>
54
	<p><button type="button" value="cancel" onclick="javascript:window.location='{REDIRECT_URL}/';" >{TEXT_CANCEL}</button></p>
58 55
	</td>
59 56
</tr>
60 57
<tr class="row6">

Also available in: Unified diff