From 519859eaf8308e3828f10064d0eeb69fb06ef5fa Mon Sep 17 00:00:00 2001
From: Pavol Rusnak <stick@gk2.sk>
Date: Tue, 8 May 2012 20:09:38 +0000
Subject: [PATCH] fix XSS in editor/extensions/fileopen.php reported by Lukas
 Reschke <lukas@statuscode.ch>

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2080 eee81c28-f429-11dd-99c0-75d572ba1ddd
---
 editor/extensions/fileopen.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/editor/extensions/fileopen.php b/editor/extensions/fileopen.php
index a6661e5c..6079591e 100644
--- a/editor/extensions/fileopen.php
+++ b/editor/extensions/fileopen.php
@@ -27,5 +27,5 @@
 	}
 ?>
 <script>
-window.top.window.svgEditor.processFile("<?php echo $prefix . base64_encode($output); ?>", "<?php echo $type ?>");
-</script>  
\ No newline at end of file
+window.top.window.svgEditor.processFile("<?php echo $prefix . base64_encode($output); ?>", "<?php echo htmlentities($type); ?>");
+</script>