File doxygen-CVE-2016-10245.patch of Package doxygen.10299
--- a/templates/html/search_opensearch.php +++ b/templates/html/search_opensearch.php @@ -3,6 +3,7 @@ $mode = array_key_exists('v', $_GET)?$_GET['v']:""; $query = array_key_exists('query', $_GET)?$_GET['query']:""; +$query = preg_replace("/[^a-zA-Z0-9\-\_\.\x80-\xFF]/i", " ", $query ); $query_results = run_query($query);