potsky / PimpMyLog

🍭 Log viewer for your web server
http://pimpmylog.com
GNU General Public License v3.0
593 stars 89 forks source link

HTML Entities for Special Characters #146

Open RealityRipple opened 4 years ago

RealityRipple commented 4 years ago

In order to prevent element (and script) injection via the Referer and User Agent tags, which can be manipulated via request headers, <, >, ", ', and \ are replaced with &#dd; character code entities in all log rows.