[svn r13735] Added cid XSS filtering in api_get_cidreq()

18 years ago · 45a6be607b
parent f358831a8e
commit 45a6be607b
1 changed files with 1 additions and 1 deletions
--- a/main/inc/lib/main_api.lib.php
+++ b/main/inc/lib/main_api.lib.php
@ -516,7 +516,7 @@ function api_get_cidreq()
 {
 	if (!empty ($GLOBALS["_cid"]))
 	{
-		return 'cidReq='.$GLOBALS["_cid"];
+		return 'cidReq='.htmlspecialchars($GLOBALS["_cid"]);
 	}
 	return '';
 }