[security] fixed issue: possible xss via last survey visited (reporte…

…d by Ismail Tasdelen )
LimeSurvey · Sep 12, 2018 · 8bde803 · 8bde803
1 parent 24cf863
commit 8bde803
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/application/views/admin/super/welcome.php b/application/views/admin/super/welcome.php
@@ -119,7 +119,7 @@
                 <?php if($showLastSurvey):?>
                     <span id="last_survey" class="rotateShown">
                     <?php eT("Last visited survey:");?>
-                    <a href="<?php echo $surveyUrl;?>" class=""><?php echo $surveyTitle;?></a>
+                    <a href="<?php echo $surveyUrl;?>" class=""><?php echo viewHelper::flatEllipsizeText($surveyTitle, true, 60);?></a>
                     </span>
                 <?php endif; ?>