BF:Persistent XSS fix #369

bbalet · Jun 6, 2022 · 3d01cef · 3d01cef
1 parent 741b621
commit 3d01cef
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/application/controllers/Leaves.php b/application/controllers/Leaves.php
@@ -182,7 +182,7 @@ public function createComment($id, $source = "leaves/leaves"){
       $newComment = new stdClass;
       $newComment->type = "comment";
       $newComment->author = $this->session->userdata('id');
-      $newComment->value = $this->input->post('comment');
+      $newComment->value = $this->input->post('comment', TRUE);
       $newComment->date = date("Y-n-j");
       if ($oldComment != NULL){
         array_push($oldComment->comments, $newComment);