From 743a26be4f65e0477fcd2f4fbe612f1e8c5d2670 Mon Sep 17 00:00:00 2001
From: Edmar Moretti <edmar.moretti@gmail.com>
Date: Fri, 9 Sep 2016 22:46:27 -0300
Subject: [PATCH] Validação da string SVG no conversor svg para png

---
 pacotes/svg2img.php | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/pacotes/svg2img.php b/pacotes/svg2img.php
index 4044bc7..8310872 100755
--- a/pacotes/svg2img.php
+++ b/pacotes/svg2img.php
@@ -1,6 +1,9 @@
 <?php
 define(I3GEO,true);
 include("validaacesso.php");
+if(simplexml_load_string($_POST["svg"])===FALSE) {
+	die;
+}
 ?>
 <html>
 <head>
@@ -30,6 +33,6 @@ function render(svg, w, h) {
 		Canvas2Image.saveAsPNG(oCanvas,false,w,h);
 	}});
 }
-render('<?php echo $_POST["svg"];?>',<?php echo $_GET["w"];?>,<?php echo $_GET["h"];?>);
+render('<?php echo $_POST["svg"];?>',<?php echo (int) $_GET["w"];?>,<?php echo (int) $_GET["h"];?>);
 </script>
 </html>
\ No newline at end of file
--
libgit2 0.21.2

