mirror of
https://github.com/lkddi/nexusphp.git
synced 2026-04-03 14:10:57 +08:00
fix view message xss
This commit is contained in:
@@ -229,7 +229,7 @@ $reply = " [ <a href=\"sendmessage.php?receiver=" . $message['sender'] . "&reply
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
$body = format_comment($message['msg']);
|
$body = format_comment($message['msg']);
|
||||||
$body = htmlspecialchars_decode($body);
|
//$body = htmlspecialchars_decode($body);
|
||||||
$added = $message['added'];
|
$added = $message['added'];
|
||||||
if ($message['sender'] == $CURUSER['id'])
|
if ($message['sender'] == $CURUSER['id'])
|
||||||
{
|
{
|
||||||
|
|||||||
Reference in New Issue
Block a user