From 293d067a4dbec7753878b6bc5ea432fe057d20f7 Mon Sep 17 00:00:00 2001 From: Daniel Cebrian Date: Mon, 23 Jan 2023 14:44:10 +0100 Subject: [PATCH] #10162 safe input description in special days --- pandora_console/include/class/CalendarManager.class.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pandora_console/include/class/CalendarManager.class.php b/pandora_console/include/class/CalendarManager.class.php index af7e51848f..989d921e88 100644 --- a/pandora_console/include/class/CalendarManager.class.php +++ b/pandora_console/include/class/CalendarManager.class.php @@ -900,7 +900,7 @@ class CalendarManager $id_group = get_parameter('id_group', null); $day_code = get_parameter('day_code', null); $id_calendar = get_parameter('id_calendar', null); - $description = get_parameter('description', null); + $description = io_safe_input(get_parameter('description', null)); $change = true; if ($new === false && ($date === $specialDay->date()