Merge pull request #33 from nahakiole/fix-xss-issue

Fixing XSS security issue.
wickedest · Nov 10, 2015 · 24b75d2 · 24b75d2
2 parents 21bd639 + 36eb076
commit 24b75d2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/editor/editor.php b/editor/editor.php
@@ -52,7 +52,7 @@
 	<script type="text/javascript" src="/Mergely/lib/searchcursor.js"></script>
 
 	<script type="text/javascript">
-        var key = '<?php echo $key; ?>';
+        var key = '<?php echo htmlspecialchars($key, ENT_QUOTES, 'UTF-8'); ?>';
         var isSample = key == 'usaindep';
     </script>