Avoid XSS when event is created on agenda - refs BT#10298

10 years ago · 1b320e5772
parent b802d09bca
commit 1b320e5772
1 changed files with 1 additions and 1 deletions
--- a/main/inc/lib/agenda.lib.php
+++ b/main/inc/lib/agenda.lib.php
@ -145,7 +145,7 @@ class Agenda
        $end = api_get_utc_datetime($end);
        $allDay = isset($allDay) && $allDay == 'true' ? 1 : 0;
        $id = null;
-        $content = nl2br($content);
+        $content = Security::remove_XSS($content);
        $eventComment = nl2br($eventComment);
        switch ($this->type) {