Security issue: Adding Security::remove_XSS function

15 years ago · 4c53c1cd02
parent 9cbe4b923f
commit 4c53c1cd02
1 changed files with 1 additions and 1 deletions
--- a/main/attendance/attendance_list.php
+++ b/main/attendance/attendance_list.php
@ -10,7 +10,7 @@
 if (api_is_allowed_to_edit(null, true)) {
 	$param_gradebook = '';
 	if (isset($_SESSION['gradebook'])) {
-		$param_gradebook = '&gradebook='.$_SESSION['gradebook'];
+		$param_gradebook = '&gradebook='.Security::remove_XSS($_SESSION['gradebook']);
 	}
 	echo '<div class="actions" style="margin-bottom:30px">';
 	echo '<a href="index.php?'.api_get_cidreq().$param_gradebook.'&action=attendance_add">'.Display::return_icon('adherir.png',get_lang('CreateANewAttendance')).' '.get_lang('CreateANewAttendance').'</a>';