// Merge -> revision 8800

2011-09-27 14:30:06 +00:00
parent cde0690abc
commit 91083e190c
110 changed files with 1240 additions and 1066 deletions
@@ -102,7 +102,7 @@ class BlockStore extends Module
 	public function getContent()
 	{
 		$output = $this->postProcess().'
-		<form action="'.$_SERVER['REQUEST_URI'].'" method="post" enctype="multipart/form-data">
+		<form action="'.Tools::safeOutput($_SERVER['REQUEST_URI']).'" method="post" enctype="multipart/form-data">
 			<fieldset>
 				<legend>'.$this->l('Store block configuration').'</legend>';
 		if (Configuration::get('BLOCKSTORE_IMG'))