docker-vulnerable-dvwa/dvwa/vulnerabilities/xss_d/source/high.php

21 lines
356 B
PHP
Raw Normal View History

2018-10-12 15:49:58 +00:00
<?php
// Is there any input?
if ( array_key_exists( "default", $_GET ) && !is_null ($_GET[ 'default' ]) ) {
# White list the allowable languages
switch ($_GET['default']) {
case "French":
case "English":
case "German":
case "Spanish":
# ok
break;
default:
header ("location: ?default=English");
exit;
}
}
?>