We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent d3ef463 commit cf84be1Copy full SHA for cf84be1
main/document/document.php
@@ -1995,7 +1995,7 @@ function convertModal (id, format) {
1995
);
1996
1997
// Document title with link and comment
1998
- $titleWithLink = $link.$session_img.'<br />'.$invisibility_span_open;
+ $titleWithLink = Security::remove_XSS($link.$session_img.'<br />'.$invisibility_span_open);
1999
$commentText = nl2br(htmlspecialchars($document_data['comment'], ENT_QUOTES, $charset));
2000
if (!empty($commentText)) {
2001
$titleWithLink .= '<em>'.$commentText.'</em>';
0 commit comments