mbk-lab
/
nextcloud
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

xss vulnerability fixed

This commit is contained in:
Bjoern Schiessle 2012-06-05 10:37:22 +02:00
parent 6d70f42dd4
commit dcc5b5ca0a
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
apps/calendar/lib/object.php
View File

@ -600,8 +600,8 @@ class OC_Calendar_Object{
public static function updateVCalendarFromRequest($request, $vcalendar)
{
$title = $request["title"];
$location = $request["location"];
$title = strip_tags($request["title"]);
$location = strip_tags($request["location"]);
$categories = $request["categories"];
$allday = isset($request["allday"]);
$from = $request["from"];
@ -611,7 +611,7 @@ class OC_Calendar_Object{
$totime = $request['totime'];
}
$vevent = $vcalendar->VEVENT;
$description = $request["description"];
$description = strip_tags($request["description"]);
$repeat = $request["repeat"];
if($repeat != 'doesnotrepeat'){
$rrule = '';