// small fixes

git-svn-id: http://dev.prestashop.com/svn/v1/branches/1.5.x@14651 b9a71923-0436-4b27-9f14-aed3839534dd
2012-04-16 09:47:34 +00:00
parent 41f137e82b
commit 3c2f9de5ba
10 changed files with 44 additions and 13 deletions
@@ -963,6 +963,8 @@ class AdminControllerCore extends Controller
 				$back = Tools::safeOutput(Tools::getValue('back', ''));
 				if (empty($back))
 					$back = self::$currentIndex.'&token='.$this->token;
+				if (!Validate::isCleanHtml($back))
+					die(Tools::displayError());
 				if (!$this->lite_display)
 					$this->toolbar_btn['back'] = array(
 						'href' => $back,