Add security::remove_XSS see BT#12486

9 years ago · 3f5bb90ae9
parent 9b71ba59d4
commit 3f5bb90ae9
1 changed files with 1 additions and 0 deletions
--- a/main/work/work.lib.php
+++ b/main/work/work.lib.php
@ -2045,6 +2045,7 @@ function get_work_user_list(
                );
                $work['title_clean'] = $work['title'];

+                $work['title'] = Security::remove_XSS($work['title']);
                if (strlen($work['title']) > 30) {
                    $short_title = substr($work['title'], 0, 27).'...';
                    $work['title'] = Display::span($short_title, array('class' => 'work-title', 'title' => $work['title']));