GSP/Panel
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: escape service_name in order.php to prevent XSS; modernize admin JS

Browse source 
Agent-Logs-Url: https://github.com/GameServerPanel/GSP/sessions/28b4019a-734d-418e-8002-8c1ff0c0f564

Co-authored-by: iaretechnician <2749183+iaretechnician@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot] 2026-05-03 23:04:59 +00:00 • committed by GitHub
parent 21bcdac9d7
commit 9740cdd33b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

6
modules/billing/adminserverlist.php
View file

@ -576,11 +576,11 @@ while ($svcRes && ($row = $svcRes->fetch_assoc())) {
<script>
// Toggle fallback text input when image dropdown changes
document.querySelectorAll('select[data-fallback-id]').forEach(function (sel) {
document.querySelectorAll('select[data-fallback-id]').forEach((sel) => {
sel.addEventListener('change', function () {
var fb = document.getElementById(this.dataset.fallbackId);
const fb = document.getElementById(this.dataset.fallbackId);
if (!fb) return;
var show = (this.value === '__other__');
const show = (this.value === '__other__');
fb.classList.toggle('img-fallback-visible', show);
if (!show) fb.value = '';
});