Knah-Tsaeb/MyShaarli
Knah-Tsaeb/MyShaarli
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Merge pull request #987 from ArthurHoaro/hotfix/security-issue

Browse source 
Fix security issue reported by @chb9
This commit is contained in:
ArthurHoaro 2017-10-07 11:33:20 +02:00 committed by GitHub
commit be9ddff2fb
2 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
index.php
View file

@ -840,7 +840,7 @@ function renderPage($conf, $pluginManager, $LINKSDB, $history)
} }
$data = array( $data = array(
'search_tags' => implode(' ', $filteringTags), 'search_tags' => implode(' ', escape($filteringTags)),
'tags' => $tagList, 'tags' => $tagList,
); );
$pluginManager->executeHooks('render_tagcloud', $data, array('loggedin' => isLoggedIn())); $pluginManager->executeHooks('render_tagcloud', $data, array('loggedin' => isLoggedIn()));
@ -870,7 +870,7 @@ function renderPage($conf, $pluginManager, $LINKSDB, $history)
} }
$data = [ $data = [
'search_tags' => implode(' ', $filteringTags), 'search_tags' => implode(' ', escape($filteringTags)),
'tags' => $tags, 'tags' => $tags,
]; ];
$pluginManager->executeHooks('render_taglist', $data, ['loggedin' => isLoggedIn()]); $pluginManager->executeHooks('render_taglist', $data, ['loggedin' => isLoggedIn()]);

2
tpl/default/tag.cloud.html
View file

@ -26,7 +26,7 @@ <h2 class="window-title">{'Tag cloud'|t} - {$countTags} {'tags'|t}</h2>
<input type="hidden" name="do" value="tagcloud"> <input type="hidden" name="do" value="tagcloud">
<input type="text" name="searchtags" placeholder="{'Filter by tag'|t}" <input type="text" name="searchtags" placeholder="{'Filter by tag'|t}"
{if="!empty($search_tags)"} {if="!empty($search_tags)"}
value="{$search_tags}" value="{$search_tags}"
{/if} {/if}
autocomplete="off" data-multiple data-autofirst data-minChars="1" autocomplete="off" data-multiple data-autofirst data-minChars="1"
data-list="{loop="$tags"}{$key}, {/loop}" data-list="{loop="$tags"}{$key}, {/loop}"