Add remove_XSS() to folder creation process

10 years ago · 937ed5a1d0
parent f8fd7bc564
commit 937ed5a1d0
1 changed files with 1 additions and 1 deletions
--- a/main/inc/ajax/document.ajax.php
+++ b/main/inc/ajax/document.ajax.php
@ -76,7 +76,7 @@ switch ($action) {
    case 'document_destination':
        //obtained the bootstrap-select selected value via ajax
        $dirValue = isset($_POST['dirValue']) ? $_POST['dirValue'] : null;
-        echo $dirValue;
+        echo Security::remove_XSS($dirValue);
        break;
 }
 exit;