#1294 Sanitze query string in search bar

Tatoeba · Aug 28, 2016 · 7fe456b · 7fe456b
1 parent 530de4c
commit 7fe456b
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 1 deletion.
diff --git a/app/views/elements/search_bar.ctp b/app/views/elements/search_bar.ctp
@@ -76,7 +76,7 @@ echo $form->create(
             <input id="SentenceQuery"
                    type="text"
                    name="query"
-                   value="<?= $searchQuery ?>"
+                   value="<?= Sanitize::html($searchQuery) ?>"
                    accesskey="4"
                    lang=""
                    dir="auto"

diff --git a/app/views/elements/sentences/sentence_and_translations.ctp b/app/views/elements/sentences/sentence_and_translations.ctp