From 55f0051db2c401f9ccd34f1737a89dda8f039a24 Mon Sep 17 00:00:00 2001 From: Laurent Destailleur Date: Fri, 30 Aug 2019 15:17:13 +0200 Subject: [PATCH 1/5] Html tag Date: Fri, 30 Aug 2019 16:22:24 +0200 Subject: [PATCH 2/5] Fix js injection --- htdocs/core/lib/functions.lib.php | 8 ++++++-- htdocs/main.inc.php | 17 +++++++++-------- htdocs/user/group/card.php | 4 ++-- 3 files changed, 17 insertions(+), 12 deletions(-) diff --git a/htdocs/core/lib/functions.lib.php b/htdocs/core/lib/functions.lib.php index 30267a57ad5..5540feadd14 100644 --- a/htdocs/core/lib/functions.lib.php +++ b/htdocs/core/lib/functions.lib.php @@ -922,11 +922,15 @@ function dol_escape_js($stringtoescape, $mode = 0, $noescapebackslashn = 0) * @param string $stringtoescape String to escape * @param int $keepb 1=Preserve b tags (otherwise, remove them) * @param int $keepn 1=Preserve \r\n strings (otherwise, replace them with escaped value). Set to 1 when escaping for a