Merge branch 'ent-9774-XSS-reporting-dashboard-module' into 'develop'

fix xss

See merge request artica/pandorafms!5249
This commit is contained in:
Daniel Rodriguez 2022-11-07 16:06:29 +00:00
commit 038195146e
1 changed files with 10 additions and 0 deletions

View File

@ -774,6 +774,16 @@ class Manager implements PublicLogin
$dashboards = \db_get_all_rows_sql($sql_dashboard);
if ($favourite === true && $dashboards !== false && count($dashboards) > 0) {
$dashboards = array_map(
function ($dashboard) {
$dashboard['name'] = io_safe_input($dashboard['name']);
return $dashboard;
},
$dashboards
);
}
if ($dashboards === false) {
$dashboards = [];
}