Fix widgetStyle escape is not applied

YJSoft · Jul 6, 2023 · a4dc92b · a4dc92b
1 parent 5cd61c1
commit a4dc92b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/widget/widget.model.php b/modules/widget/widget.model.php
@@ -263,7 +263,7 @@ function getWidgetInfo($widget)
 	 */
 	function getWidgetStyleInfo($widgetStyle)
 	{
-		$widget = escape($widgetStyle);
+		$widgetStyle = preg_replace('/[^a-zA-Z0-9-_]/', '', $widgetStyle);
 		$widgetStyle_path = $this->getWidgetStylePath($widgetStyle);
 		if(!$widgetStyle_path) return;
 		$xml_file = sprintf("%sskin.xml", $widgetStyle_path);