XSS clean the license text (#359)

2026-04-16 04:50:09 -04:00 · 2016-08-08 16:09:40 +01:00
parent 19403adde2
commit 597a5caee5
1 changed files with 2 additions and 0 deletions
--- a/application/controllers/Config.php
+++ b/application/controllers/Config.php
@@ -104,6 +104,8 @@ class Config extends Secure_Controller
 					$license[$i]['text'] .= "\n";
 				}
 			}
+			
+			$license[$i]['text'] = $this->xss_clean($license[$i]['text']);
 		}
 		
 		return $license;