2
0
forked from Wavyzz/dolibarr

FIX XSS in company setup page

This commit is contained in:
Laurent Destailleur
2018-04-06 19:12:13 +02:00
parent 417c07a6e8
commit 1a321e19c8
4 changed files with 63 additions and 61 deletions

View File

@@ -549,10 +549,10 @@ function GETPOST($paramname, $check='none', $method=0, $filter=NULL, $options=NU
case 'array':
if (! is_array($out) || empty($out)) $out=array();
break;
case 'nohtml':
case 'nohtml': // Recommended for most scalar parameters
$out=dol_string_nohtmltag($out, 0);
break;
case 'alphanohtml': // Recommended for search params
case 'alphanohtml': // Recommended for search parameters
if (! is_array($out))
{
$out=trim($out);