Fix forum HTML description see #8214

9 years ago · aa21c8774a
parent 284d08e2e2
commit aa21c8774a
2 changed files with 2 additions and 3 deletions
--- a/main/forum/index.php
+++ b/main/forum/index.php
@ -514,10 +514,9 @@ if (is_array($forumCategories)) {
                        );

                        $html .= '<h3 class="title">' . $iconForum . $linkForum . '</h3>';
-
                        $html .= Display::tag(
                            'p',
-                            strip_tags($forum['forum_comment']),
+                            Security::remove_XSS($forum['forum_comment']),
                            array(
                                'class'=>'description'
                            )
--- a/main/forum/viewforum.php
+++ b/main/forum/viewforum.php
@ -410,7 +410,7 @@ if ($origin != 'learnpath') {
    if (!empty($descriptionForum)) {
        $html .= Display::tag(
            'p',
-            strip_tags($descriptionForum),
+            Security::remove_XSS($descriptionForum),
            array(
                'class' => 'description',
            )