fix vulnerability

This commit is contained in:
alejandro-campos 2020-06-16 17:27:53 +02:00
parent e6aee8582d
commit 98b358e7ad
1 changed files with 1 additions and 1 deletions

View File

@ -4750,7 +4750,7 @@ function events_page_comments($event, $ajax=false)
foreach ($comm as $c) {
$data[0] = '<b>'.$c['action'].' by '.$c['id_user'].'</b>';
$data[0] .= '<br><br><i>'.date($config['date_format'], $c['utimestamp']).'</i>';
$data[1] = '<p style="word-break: break-word;">'.stripslashes(str_replace(['\n', '\r'], '<br/>', $c['comment'])).'</p>';
$data[1] = '<p style="word-break: break-word;">'.strip_tags($c['comment'], '<br>').'</p>';
$table_comments->data[] = $data;
}
break;