Skip to content

Commit d65c083

Browse files
author
Bauffman
committed
Make sure the error doesn't contain any html tags.
1 parent c8ec9c5 commit d65c083

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

Diff for: backend/core/engine/base.php

+1-1
Original file line numberDiff line numberDiff line change
@@ -165,7 +165,7 @@ public function execute()
165165
if($this->getParameter('error') !== null)
166166
{
167167
// camelcase the string
168-
$errorName = SpoonFilter::toCamelCase($this->getParameter('error'), '-');
168+
$errorName = strip_tags(SpoonFilter::toCamelCase($this->getParameter('error'), '-'));
169169

170170
// if we have data to use it will be passed as the var parameter
171171
if(!empty($var)) $this->tpl->assign('errorMessage', vsprintf(BL::err($errorName), $var));

0 commit comments

Comments
 (0)