diff --git a/main/blog/blog.php b/main/blog/blog.php index 8b3d0a254b..4c449bf2bd 100755 --- a/main/blog/blog.php +++ b/main/blog/blog.php @@ -35,7 +35,7 @@ $action = isset($_GET['action']) ? $_GET['action'] : null; */ $safe_post_file_comment = isset($_POST['post_file_comment']) ? Security::remove_XSS($_POST['post_file_comment']) : null; -$safe_comment_text = isset($_POST['comment_text']) ? Security::remove_XSS(stripslashes(api_html_entity_decode($_POST['comment_text'])), COURSEMANAGERLOWSECURITY) : null; +$safe_comment_text = isset($_POST['comment_text']) ? Security::remove_XSS($_POST['comment_text']) : null; $safe_comment_title = isset($_POST['comment_title']) ? Security::remove_XSS($_POST['comment_title']) : null; $safe_task_name = isset($_POST['task_name']) ? Security::remove_XSS($_POST['task_name']) : null; $safe_task_description = isset($_POST['task_description']) ? Security::remove_XSS($_POST['task_description']) : null; @@ -311,7 +311,7 @@ Display::display_introduction_section(TOOL_BLOGS);