Changeset 26916 for trunk


Ignore:
Timestamp:
Jan 23, 2014, 12:06:38 PM (11 years ago)
Author:
mistic100
Message:

bug 3029: XSS on website_url comment form

File:
1 edited

Legend:

Unmodified
Added
Removed

  • trunk/include/functions_comment.inc.php

    r26461 r26916  
    148148  if (!empty($comm['website_url']))
    149149  {
     150    $comm['website_url'] = strip_tags($comm['website_url']);
    150151    if (!preg_match('/^https?/i', $comm['website_url']))
    151152    {
    … …  
    352353  if (!empty($comment['website_url']))
    353354  {
     355    $comm['website_url'] = strip_tags($comm['website_url']);
    354356    if (!preg_match('/^https?/i', $comment['website_url']))
    355357    {
Note: See TracChangeset for help on using the changeset viewer.