Zero-Day XSS Security Fix

[athena]

fix instructions for 1.3.0.2...I've kept up with the security releases but the changed files for this recent xxs fix don't match my files. Is leaving the changed files alone and simply adding the change as instructed manually ok?

I implimented the code addition to init_general_funcs.php adding at the bottom:

//-----------------
if (isset($_GET) & sizeof($_GET) > 0 ) {
foreach ($_GET as $key=>$value) {
$_GET[$key] = strip_tags($value);
}
}
//-----------------

Good enough?

[DrByte]

The posted ZIP includes the XSS fixes for both announcements made recently.
If you already applied the first fixes then you only need to make the one change as you indicated.

[athena]

Appreciate the short cut...thanks.