Fix api_get_origin()

origin is not only learnpath
chamilo · Sep 25, 2017 · eb6d2be · eb6d2be · ywarnier · Sep 26, 2017
1 parent 66ccac4
commit eb6d2be
Showing 1 changed file with 2 additions and 4 deletions.
diff --git a/main/inc/lib/api.lib.php b/main/inc/lib/api.lib.php
@@ -7780,11 +7780,9 @@ function convert_double_quote_to_single($in_text)
  **/
 function api_get_origin()
 {
-    if (isset($_REQUEST['origin'])) {
-        return $_REQUEST['origin'] === 'learnpath' ? 'learnpath' : '';
-    }
+    $origin = isset($_REQUEST['origin']) ? Security::remove_XSS($_REQUEST['origin']) : '';
 
-    return '';
+    return $origin;
 }
 
 /**