diff --git a/source/Styles/xb3/jst/includes/utility.jst b/source/Styles/xb3/jst/includes/utility.jst index db0f48d..170fa9d 100644 --- a/source/Styles/xb3/jst/includes/utility.jst +++ b/source/Styles/xb3/jst/includes/utility.jst @@ -1150,8 +1150,10 @@ function cleanJsonDms($dm_key, $param_json) { function getValidatedMacSsidValueJs() { var $mac_ssid_v = ""; - if(isset($_GET['mac_ssid']) && preg_match('/^\d+$/', $_GET['mac_ssid']) == 1) { - $mac_ssid_v = intval($_GET['mac_ssid']); + $mac_ssid_input = isset($_GET['mac_ssid']) ? $_GET['mac_ssid'] : ""; + // Only validate scalar query text; arrays and other values must be ignored. + if((typeof $mac_ssid_input === "string") && preg_match('/^\d+$/', $mac_ssid_input) == 1) { + $mac_ssid_v = intval($mac_ssid_input); if ($mac_ssid_v < 1 || $mac_ssid_v > 17) $mac_ssid_v = ""; else