From 8fc88d3adabece89efc6d3d960837f0c66558e3e Mon Sep 17 00:00:00 2001
From: xiaomlove <353856593@qq.com>
Date: Wed, 22 Nov 2023 14:50:14 +0800
Subject: [PATCH] fix view message xss

---
 public/messages.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/public/messages.php b/public/messages.php
index c4061fe2..951b5096 100644
--- a/public/messages.php
+++ b/public/messages.php
@@ -229,7 +229,7 @@ $reply = " [ <a href=\"sendmessage.php?receiver=" . $message['sender'] . "&reply
 }
 }
 $body = format_comment($message['msg']);
-$body = htmlspecialchars_decode($body);
+//$body = htmlspecialchars_decode($body);
 $added = $message['added'];
 if ($message['sender'] == $CURUSER['id'])
 {