Documents: Add remove_XSS

5 years ago · cf84be1ca1
parent d3ef46353b
commit cf84be1ca1
1 changed files with 1 additions and 1 deletions
--- a/main/document/document.php
+++ b/main/document/document.php
@ -1995,7 +1995,7 @@ if (!empty($documentAndFolders)) {
            );

            // Document title with link and comment
-            $titleWithLink = $link.$session_img.'<br />'.$invisibility_span_open;
+            $titleWithLink = Security::remove_XSS($link.$session_img.'<br />'.$invisibility_span_open);
            $commentText = nl2br(htmlspecialchars($document_data['comment'], ENT_QUOTES, $charset));
            if (!empty($commentText)) {
                $titleWithLink .= '<em>'.$commentText.'</em>';