AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-02-28 10:54:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

Documents

Browse Source 
- Properly escape HTML in the edit modal
- Tidy
This commit is contained in:
Marcus Hill
2023-03-11 19:55:38 +00:00
parent 4344a4fcca
commit 90bba73aac
4 changed files with 16 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
client_document_edit_modal.php
View File

@@ -17,7 +17,7 @@
</div>
<div class="form-group">
<textarea class="form-control summernote" name="content"><?php echo $document_content; ?></textarea>
<textarea class="form-control summernote" name="content"><?php echo htmlentities($document_content); ?></textarea>
</div>
<div class="form-group">