Fix forum HTML description see #8214

chamilo · Apr 28, 2016 · aa21c87 · aa21c87
1 parent 284d08e
commit aa21c87
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 3 deletions.
diff --git a/main/forum/index.php b/main/forum/index.php
@@ -514,10 +514,9 @@ function hidecontent(content){
                         );
 
                         $html .= '<h3 class="title">' . $iconForum . $linkForum . '</h3>';
-
                         $html .= Display::tag(
                             'p',
-                            strip_tags($forum['forum_comment']),
+                            Security::remove_XSS($forum['forum_comment']),
                             array(
                                 'class'=>'description'
                             )

diff --git a/main/forum/viewforum.php b/main/forum/viewforum.php
@@ -410,7 +410,7 @@
     if (!empty($descriptionForum)) {
         $html .= Display::tag(
             'p',
-            strip_tags($descriptionForum),
+            Security::remove_XSS($descriptionForum),
             array(
                 'class' => 'description',
             )