Skip to content

Commit de43a77

Browse files
committed
Security: Add script tags filter for users invitations in social network
1 parent dfae49f commit de43a77

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

main/inc/lib/social.lib.php

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -662,6 +662,7 @@ public static function sendInvitationToUser($userId, $subject = '', $content = '
662662
$user_info = api_get_user_info($userId);
663663
$success = get_lang('MessageSentTo');
664664
$success .= ' : '.api_get_person_name($user_info['firstName'], $user_info['lastName']);
665+
$content = strip_tags($content);
665666

666667
if (isset($subject) && isset($content) && isset($userId)) {
667668
$result = MessageManager::send_message($userId, $subject, $content);

0 commit comments

Comments
 (0)