remove xss in kb comments

glpi-project · May 5, 2020 · 01189af · 01189af
1 parent 9f1117d
commit 01189af
Showing 1 changed file with 2 additions and 12 deletions.
diff --git a/inc/knowbaseitem_comment.class.php b/inc/knowbaseitem_comment.class.php
@@ -82,15 +82,7 @@ static function displayTabContentForItem(CommonGLPI $item, $tabnum = 1, $withtem
     * @param $withtemplate    integer  withtemplate param (default 0)
    **/
    static function showForItem(CommonDBTM $item, $withtemplate = 0) {
-      global $DB, $CFG_GLPI;
-
-      $item_id = $item->getID();
-      $item_type = $item::getType();
-      if (isset($_GET["start"])) {
-         $start = intval($_GET["start"]);
-      } else {
-         $start = 0;
-      }
+      global $CFG_GLPI;
 
       // Total Number of comments
       if ($item->getType() == KnowbaseItem::getType()) {
@@ -309,9 +301,7 @@ static public function displayComments($comments, $cancomment, $level = 0) {
          }
 
          $html .= "<div class='item_content'>";
-         $html .= "<p>";
-         $html .= Toolbox::unclean_cross_side_scripting_deep($comment['comment']);
-         $html .= "</p>";
+         $html .= "<p>{$comment['comment']}</p>";
          $html .= "</div>";
          $html .= "</div>"; // displayed_content