update

microweber · Jun 20, 2022 · d380c10 · d380c10
1 parent 824b5cc
commit d380c10
Showing 1 changed file with 11 additions and 9 deletions.
diff --git a/userfiles/modules/microweber/toolbar/editor_tools/module/index.php b/userfiles/modules/microweber/toolbar/editor_tools/module/index.php
@@ -1,16 +1,18 @@
 <?php
-    $uid = uniqid();
+$uid = uniqid();
 
-    $type = '';
-    $params = array();
+$type = '';
+$params = array();
 
 
-    if (array_key_exists('type', $_GET)) {
-        $type = $_GET['type'];
-    }
-    if (array_key_exists('params', $_GET)) {
-        $params = explode(',', $_GET['params']);
-    }
+if (array_key_exists('type', $_GET)) {
+    $type = $_GET['type'];
+}
+if (array_key_exists('params', $_GET)) {
+    $params = explode(',', $_GET['params']);
+}
+$type = xss_clean($type);
+$params = xss_clean($params);
 ?>