Fix XSS vulnerability in register (#3965)

This commit is contained in:
jekkos
2026-03-03 22:37:08 +01:00
parent b93359bcaf
commit b6a90f7880

View File

@@ -252,7 +252,7 @@ helper('url');
echo form_input(['name' => 'description', 'class' => 'form-control input-sm', 'value' => $item['description'], 'onClick' => 'this.select();']);
} else {
if ($item['description'] != '') {
echo $item['description'];
echo esc($item['description']);
echo form_hidden('description', $item['description']);
} else {
echo lang(ucfirst($controller_name) . '.no_description');