mirror of
https://github.com/lkddi/nexusphp.git
synced 2026-04-23 19:37:23 +08:00
fix view message xss
This commit is contained in:
+1
-1
@@ -229,7 +229,7 @@ $reply = " [ <a href=\"sendmessage.php?receiver=" . $message['sender'] . "&reply
|
||||
}
|
||||
}
|
||||
$body = format_comment($message['msg']);
|
||||
$body = htmlspecialchars_decode($body);
|
||||
//$body = htmlspecialchars_decode($body);
|
||||
$added = $message['added'];
|
||||
if ($message['sender'] == $CURUSER['id'])
|
||||
{
|
||||
|
||||
Reference in New Issue
Block a user