File tree Expand file tree Collapse file tree 2 files changed +5
-4
lines changed Expand file tree Collapse file tree 2 files changed +5
-4
lines changed Original file line number Diff line number Diff line change @@ -4690,12 +4690,13 @@ function move_thread_form()
4690
4690
</div>
4691
4691
<div class="formw"> ' ;
4692
4692
$ htmlcontent .= '<select name="forum"> ' ;
4693
- foreach ($ forum_categories as $ key => $ category ) {
4693
+ foreach ($ forum_categories as $ category ) {
4694
4694
$ htmlcontent .= '<optgroup label=" ' .$ category ['cat_title ' ].'"> ' ;
4695
4695
foreach ($ forums as $ key => $ forum ) {
4696
4696
if (isset ($ forum ['forum_category ' ])) {
4697
4697
if ($ forum ['forum_category ' ] == $ category ['cat_id ' ]) {
4698
- $ htmlcontent .= '<option value=" ' .$ forum ['forum_id ' ].'"> ' .$ forum ['forum_title ' ].'</option> ' ;
4698
+ $ htmlcontent .= '<option value=" ' .$ forum ['forum_id ' ].'"> ' .
4699
+ Security::remove_XSS ($ forum ['forum_title ' ]).'</option> ' ;
4699
4700
}
4700
4701
}
4701
4702
}
Original file line number Diff line number Diff line change @@ -270,13 +270,13 @@ function hidecontent(content){
270
270
if (empty ($ forumCategory ['cat_title ' ])) {
271
271
$ forumCategoryInfo ['title ' ] = get_lang ('WithoutCategory ' );
272
272
} else {
273
- $ forumCategoryInfo ['title ' ] = $ forumCategory ['cat_title ' ];
273
+ $ forumCategoryInfo ['title ' ] = Security:: remove_XSS ( $ forumCategory ['cat_title ' ]) ;
274
274
}
275
275
$ forumCategoryInfo ['extra_fields ' ] = isset ($ forumCategory ['extra_fields ' ]) ? $ forumCategory ['extra_fields ' ] : [];
276
276
$ forumCategoryInfo ['icon_session ' ] = api_get_session_image ($ forumCategory ['session_id ' ], $ _user ['status ' ]);
277
277
278
278
// Validation when belongs to a session
279
- $ forumCategoryInfo ['description ' ] = $ forumCategory ['cat_comment ' ];
279
+ $ forumCategoryInfo ['description ' ] = Security:: remove_XSS ( $ forumCategory ['cat_comment ' ]) ;
280
280
$ forumCategory ['session_display ' ] = null ;
281
281
if (empty ($ sessionId ) && !empty ($ forumCategory ['session_name ' ])) {
282
282
$ forumCategory ['session_display ' ] = ' ( ' .Security::remove_XSS ($ forumCategory ['session_name ' ]).') ' ;
You can’t perform that action at this time.
0 commit comments