mirror of
https://github.com/pandorafms/pandorafms.git
synced 2025-07-31 01:35:36 +02:00
fix xss
This commit is contained in:
parent
dce2b3f915
commit
75fe9dd8d3
@ -774,6 +774,16 @@ class Manager implements PublicLogin
|
||||
|
||||
$dashboards = \db_get_all_rows_sql($sql_dashboard);
|
||||
|
||||
if ($favourite === true) {
|
||||
$dashboards = array_map(
|
||||
function ($dashboard) {
|
||||
$dashboard['name'] = io_safe_input($dashboard['name']);
|
||||
return $dashboard;
|
||||
},
|
||||
$dashboards
|
||||
);
|
||||
}
|
||||
|
||||
if ($dashboards === false) {
|
||||
$dashboards = [];
|
||||
}
|
||||
|
Loading…
x
Reference in New Issue
Block a user