Skip to content

Commit 51d2ec0

Browse files
committed
Glossary: add remove_xss
1 parent aa359f9 commit 51d2ec0

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

main/inc/lib/glossary.lib.php

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -624,10 +624,10 @@ public static function get_glossary_data(
624624
while ($data = Database::fetch_array($res)) {
625625
// Validation when belongs to a session
626626
$session_img = api_get_session_image($data['session_id'], $_user['status']);
627-
$array[0] = $data[0].$session_img;
627+
$array[0] = Security::remove_XSS($data[0]).$session_img;
628628

629629
if (!$view || $view === 'table') {
630-
$array[1] = str_replace(['<p>', '</p>'], ['', '<br />'], $data[1]);
630+
$array[1] = Security::remove_XSS(str_replace(['<p>', '</p>'], ['', '<br />'], $data[1]));
631631
} else {
632632
$array[1] = $data[1];
633633
}

0 commit comments

Comments
 (0)