commit 9868b78d917e6bf5a4df45ff2e55c5f62fe855e6
author Ed Merks <ed.merks@gmail.com> Fri May 29 10:03:38 2020 +0200
committer Ed Merks <ed.merks@gmail.com> Fri May 29 10:03:38 2020 +0200
tree 5cc13e773694d7daf556013d548059f72e50b95f
parent 059fce798d17809e0485ede4b972b1be80877f4e

[562040] Provide support for donation from within the IDE

https://bugs.eclipse.org/bugs/show_bug.cgi?id=562040

Fix xxs vulnerability.

releng/org.eclipse.oomph.releng/www/donate/index.php

diff --git a/releng/org.eclipse.oomph.releng/www/donate/index.php b/releng/org.eclipse.oomph.releng/www/donate/index.php
index 6e9ded7..6a5fda8 100644
--- a/releng/org.eclipse.oomph.releng/www/donate/index.php
+++ b/releng/org.eclipse.oomph.releng/www/donate/index.php
@@ -102,13 +102,13 @@
 $toggle_collapse = '<span style="font-size: 125%;" class="orange toggle-state-off">&#x25B7;</span>';
 $read_more = '<span style="font-size: 50%;" class="orange toggle-state-off">&nbsp;&nbsp;read more...</span>';
 
-$scope = $_GET["scope"];
+$scope = htmlentities($_GET["scope"]);
 if (!$scope)
 {
   $scope = "Eclipse IDE";
 }
 
-$version = $_GET["version"];
+$version = htmlentities($_GET["version"]);
 $version_label = "";
 $version_parameter = "";
 if (!$version)
@@ -122,7 +122,7 @@
 }
 
 $donate_parameter = "?scope=" . urlencode($scope);
-$campaign = $_GET["campaign"];
+$campaign = htmlentities($_GET["campaign"]);
 if ($campaign)
 {
   $donate_parameter .= htmlentities("&campaign=") . urlencode($campaign);