From b31b6667f60ffa9baf69959bdfdb1e2136e67dc8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pierre=20Mazi=C3=A8re?= <pierre.maziere@gmx.com>
Date: Tue, 23 Aug 2016 17:22:51 +0200
Subject: [PATCH] [core] fix missing filter_input
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Pierre Mazière <pierre.maziere@gmx.com>
---
 index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/index.php b/index.php
index 157c6410..25f5b549 100644
--- a/index.php
+++ b/index.php
@@ -102,7 +102,7 @@ try{
         $bridge=substr($bridge,0,$pos);
       }
 
-      $format = $_REQUEST['format'];
+      $format = filter_input(INPUT_GET,'format');
       unset($_REQUEST['format']);
       // DEPRECATED: 'nameFormat' scheme is replaced by 'name' in format parameter values
       //             this is to keep compatibility until futher complete removal