Use sanitizeHTML instead of stripslashes + htmlspecialchars

12 years ago · 1b10032556
parent 1c56539c01
commit 1b10032556
1 changed files with 1 additions and 1 deletions
--- a/lib/helper.php
+++ b/lib/helper.php
@ -437,7 +437,7 @@ class OC_Helper {
 	public static function init_var($s, $d="") {
 		$r = $d;
 		if(isset($_REQUEST[$s]) && !empty($_REQUEST[$s]))
-			$r = stripslashes(htmlspecialchars($_REQUEST[$s]));
+			$r = OC_Util::sanitizeHTML($_REQUEST[$s]);

 		return $r;
 	}