From 9a44f77d2e98e370894e3f9e07c8368dc281a8f9 Mon Sep 17 00:00:00 2001 From: Jared Hancock <jared@osticket.com> Date: Tue, 19 Nov 2013 12:22:51 -0600 Subject: [PATCH] Properly handle htmlchars in web-based posts --- include/class.thread.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/include/class.thread.php b/include/class.thread.php index 9b4853a42..847932fe7 100644 --- a/include/class.thread.php +++ b/include/class.thread.php @@ -148,7 +148,7 @@ class Thread { // DELME: When HTML / rich-text is supported $vars['title'] = Format::htmlchars($vars['title']); - $vars['body'] = Format::htmlchars($vars['body']); + $vars['note'] = Format::htmlchars($vars['note']); return Note::create($vars, $errors); } @@ -160,7 +160,7 @@ class Thread { // DELME: When HTML / rich-text is supported $vars['title'] = Format::htmlchars($vars['title']); - $vars['body'] = Format::htmlchars($vars['body']); + $vars['message'] = Format::htmlchars($vars['message']); return Message::create($vars, $errors); } @@ -171,7 +171,7 @@ class Thread { // DELME: When HTML / rich-text is supported $vars['title'] = Format::htmlchars($vars['title']); - $vars['body'] = Format::htmlchars($vars['body']); + $vars['response'] = Format::htmlchars($vars['response']); return Response::create($vars, $errors); } -- GitLab