diff --git a/src-phpws-legacy/src/PHPWS_Text.php b/src-phpws-legacy/src/PHPWS_Text.php index 5bf6012ab..b14417082 100644 --- a/src-phpws-legacy/src/PHPWS_Text.php +++ b/src-phpws-legacy/src/PHPWS_Text.php @@ -375,7 +375,8 @@ public static function parseOutput($text, $decode = ENCODE_PARSED_TEXT, $t->useBreaker($use_breaker); $t->useAnchor($fix_anchors); $text = $t->getPrint(); - $text = filter_var($text, FILTER_UNSAFE_RAW, FILTER_FLAG_STRIP_HIGH); +// $text = filter_var($text, FILTER_UNSAFE_RAW, FILTER_FLAG_STRIP_HIGH); + $text = filter_var($text, FILTER_UNSAFE_RAW, FILTER_FLAG_STRIP_LOW | FILTER_FLAG_STRIP_BACKTICK); //Allows for accents from non English languages. parseInput should filter out unwanted characters regarding SQL injection. return $text; }