Browse Source

Merge pull request #2877 from HexPandaa/master

Fixed an XSS vulnerability
Julio Montoya 6 years ago
parent
commit
d0b226a2b7
1 changed files with 1 additions and 1 deletions
  1. 1 1
      main/forum/viewthread.php

+ 1 - 1
main/forum/viewthread.php

@@ -634,7 +634,7 @@ foreach ($posts as $post) {
         'Aw:',
     ];
     $replace = '<span>'.Display::returnFontAwesomeIcon('mail-reply').'</span>';
-    $post['post_title'] = str_replace($search, $replace, $post['post_title']);
+    $post['post_title'] = str_replace($search, $replace, Security::remove_XSS($post['post_title']));
 
     // The post title
     $titlePost = Display::tag('h3', $post['post_title'], ['class' => 'forum_post_title']);