Skip to content

Commit 63bf4ad

Browse files
committed
Fix XSS Breach in forum viewthread posts text
1 parent 7e3f9af commit 63bf4ad

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

main/forum/viewthread.php

+1
Original file line numberDiff line numberDiff line change
@@ -624,6 +624,7 @@ class="flag-icon flag-icon-'.$languages[$languageInfo['english_name']].'"></span
624624
$post['post_title'] .= Display::tag('div', $titlePost, ['class' => 'post-header']);
625625

626626
// the post body
627+
$post['post_text'] = Security::remove_XSS($post['post_text']);
627628
$post['post_data'] = Display::tag('div', $post['post_text'], ['class' => 'post-body']);
628629

629630
// The check if there is an attachment

0 commit comments

Comments
 (0)