fix: 0008808: TestLink v1.9.19.1 - Bypass security fix for XSS at ind…

…ex.php
TestLinkOpenSourceTRMS · Dec 31, 2019 · cde6928 · cde6928
1 parent e2bebf6
commit cde6928
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/index.php b/index.php
@@ -92,7 +92,7 @@ function initEnv() {
 
     // some sanity checks
     // strpos ( string $haystack , mixed $needle
-    if (strpos($args->reqURI,'javascript') !== false) {
+    if (stripos($args->reqURI,'javascript') !== false) {
       $args->reqURI = null; 
     }
   }