ignore keys on xss event comments

2020-06-19 10:59:43 +02:00 · 2020-06-19 10:59:43 +02:00 · 7cfc68a3d6
parent 93bc14d102
commit 7cfc68a3d6
1 changed files with 1 additions and 1 deletions
--- a/pandora_console/include/ajax/events.php
+++ b/pandora_console/include/ajax/events.php
@ -1090,7 +1090,7 @@ if ($dialogue_event_response) {
 if ($add_comment) {
    $aviability_comment = true;
    $comment = get_parameter('comment');
-    if (preg_match('<script>', io_safe_output($comment))) {
+    if (preg_match('/script/i', io_safe_output($comment))) {
        $aviability_comment = false;
        $return = false;
    }