Skip to content

Commit d033098

Browse files
committed
fix: [security] Fixed stored xss when exporting custom clusters into the misp-galaxy format
- As reported by fukusuket (Fukusuke Takahashi)
1 parent e02c2b8 commit d033098

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

Diff for: app/View/GalaxyClusters/cluster_export_misp_galaxy.ctp

+1-1
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
<p>This JSON can be added added to the <code class="quickSelect">misp-galaxy/clusters/<?= h($cluster['GalaxyCluster']['type']) ?>.json</code>.</p>
66
<p>Don't forget to bump the <code>version</code> specified at the end of the <code><?= h($cluster['GalaxyCluster']['type']) ?>.json</code> file.</p>
77

8-
<pre class="quickSelect"><?= JsonTool::encode($convertedCluster, true) ?></pre>
8+
<pre class="quickSelect"><?= JsonTool::encode(h($convertedCluster), true) ?></pre>
99
</div>
1010
</div>
1111
<?= $this->element('/genericElements/SideMenu/side_menu', ['menuList' => 'galaxies', 'menuItem' => 'view_cluster']);

0 commit comments

Comments
 (0)