Add Security::remove_XSS in user list

6 years ago · 04bdf2f0a6
parent ef12e1699b
commit 04bdf2f0a6
1 changed files with 2 additions and 2 deletions
--- a/main/user/user.php
+++ b/main/user/user.php
@ -914,9 +914,9 @@ function get_user_data($from, $number_of_items, $column, $direction)
                            );
                            if (!empty($optionList)) {
                                $options = implode(', ', array_column($optionList, 'display_text'));
-                                $temp[] = $options;
+                                $temp[] = Security::remove_XSS($options);
                            } else {
-                                $temp[] = $data['value'];
+                                $temp[] = Security::remove_XSS($data['value']);
                            }
                        } else {
                            $temp[] = '';