Sanitize Web site URL

https://github.com/FreshRSS/FreshRSS/issues/1434
This commit is contained in:
Alexandre Alapetite
2017-02-25 11:51:54 +01:00
parent b8ac2b1d8a
commit 8a6b381154
2 changed files with 4 additions and 4 deletions

View File

@@ -90,8 +90,8 @@ class FreshRSS_subscription_Controller extends Minz_ActionController {
$values = array(
'name' => Minz_Request::param('name', ''),
'description' => sanitizeHTML(Minz_Request::param('description', '', true)),
'website' => Minz_Request::param('website', ''),
'url' => Minz_Request::param('url', ''),
'website' => checkUrl(Minz_Request::param('website', '')),
'url' => checkUrl(Minz_Request::param('url', '')),
'category' => $cat,
'pathEntries' => Minz_Request::param('path_entries', ''),
'priority' => intval(Minz_Request::param('priority', 0)),