Skip to content
Snippets Groups Projects
Commit 1f8df249 authored by Peter Rotich's avatar Peter Rotich Committed by GitHub
Browse files

Merge pull request #3960 from protich/issue/xss-forms

xss: Cached forms data
parents ebe19531 bcd58e88
No related branches found
No related tags found
No related merge requests found
...@@ -21,7 +21,8 @@ class DynamicFormsAjaxAPI extends AjaxController { ...@@ -21,7 +21,8 @@ class DynamicFormsAjaxAPI extends AjaxController {
if ($_GET || isset($_SESSION[':form-data'])) { if ($_GET || isset($_SESSION[':form-data'])) {
if (!is_array($_SESSION[':form-data'])) if (!is_array($_SESSION[':form-data']))
$_SESSION[':form-data'] = array(); $_SESSION[':form-data'] = array();
$_SESSION[':form-data'] = array_merge($_SESSION[':form-data'], $_GET); $_SESSION[':form-data'] = array_merge($_SESSION[':form-data'],
Format::htmlchars($_GET));
} }
foreach ($topic->getForms() as $form) { foreach ($topic->getForms() as $form) {
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment