safe_input to custom field data received (dataserver)

Former-commit-id: 4f38e951d02d7e3645b632cd0e48b52647565966
This commit is contained in:
fbsanchez 2019-01-03 11:18:26 +01:00
parent d114a77151
commit c5501e2b0a

View File

@ -402,7 +402,7 @@ sub process_xml_data ($$$$$) {
$field_agent->{'id_agent'} = $agent_id;
$field_agent->{'id_field'} = $custom_field_info->{'id_field'};
$field_agent->{'description'} = $cf_value;
$field_agent->{'description'} = safe_input($cf_value);
db_process_insert($dbh, 'id_field', 'tagent_custom_data', $field_agent);
}