Permalink
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Browse files
Browse the repository at this point in the history
Fix stored XSS as reported by Chirag Savla
It's a pretty old problem – a beginner's mistake in programming. Damn. As far I can see no huge problem because of CSRF and you need to be logged in to the backend. But it wasn't well done from my side. If you have older installations check the html() function which were added. Older releases do not know html() – use html_specialchars() instead.
- Loading branch information