Merge pull request #3884 from cbluesprl/cblue_forum_posts_xss

Fix XSS Breach in forum viewthread posts text
5 years ago · 28255278c5
parent 7e3f9afbd1 63bf4ad848
commit 28255278c5
1 changed files with 1 additions and 0 deletions
--- a/main/forum/viewthread.php
+++ b/main/forum/viewthread.php
@ -624,6 +624,7 @@ foreach ($posts as $post) {
    $post['post_title'] .= Display::tag('div', $titlePost, ['class' => 'post-header']);

    // the post body
+    $post['post_text'] = Security::remove_XSS($post['post_text']);
    $post['post_data'] = Display::tag('div', $post['post_text'], ['class' => 'post-body']);

    // The check if there is an attachment