bobsta63/zpanelx — pull request #65 by motters (2013-07-22 22:14:48+00:00)
Title: Xss encoding, encoded information

QA TEAM TEST! This should stop the encoding of the already encoded html entities.

I currently don't have a ZPX set up so can not test this but reading PHP documentation (http://php.net/manual/en/function.htmlspecialchars.php) it should work fine.

If some one could update there server and email me login details i shall test this.

This needs testing that "Chers clients, vous êtes invités à" display correctly in inputs.
Also checking that it escape all Xss attempts! **Quick** test just past the below in a text box and check that no JS alerts are shown.

';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";
alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//--
>">'>

Related Bug: http://bugs.zpanelcp.com/view.php?id=571