浏览代码

Adding security::remove_XSS

Julio Montoya 15 年之前
父节点
当前提交
91089a55e6
共有 1 个文件被更改,包括 2 次插入2 次删除
  1. 2 2
      main/inc/lib/course_description.lib.php

+ 2 - 2
main/inc/lib/course_description.lib.php

@@ -40,9 +40,9 @@ class CourseDescription
 			if ($description['description_type'] == THEMATIC_ADVANCE) {
 				$description['progress_icon'] = $this->get_progress_porcent();
 			}
-			$data['descriptions'][$description['description_type']] = $description;
+			$data['descriptions'][$description['description_type']] = Security::remove_XSS($description, STUDENT);
 			//reload titles to ensure we have the last version (after edition)
-			$data['default_description_titles'][$description['description_type']] = $description['title'];
+			$data['default_description_titles'][$description['description_type']] = Security::remove_XSS($description['title'], STUDENT);
 		}
 		return $data;
 	}