HOR-282 Adds XSS filtering to changeStatus.

2016-03-08 01:47:53 +00:00
parent cddb3eeba1
commit dbbdd7c0db
1 changed files with 1 additions and 1 deletions
--- a/workflow/engine/controllers/processProxy.php
+++ b/workflow/engine/controllers/processProxy.php
@@ -118,7 +118,7 @@ class ProcessProxy extends HttpProxyController
        $oProcess = new Processes();
        if (count( $ids ) > 0) {
            foreach ($ids as $id) {
-                $oProcess->changeStatus( $id );
+                $oProcess->changeStatus( htmlspecialchars($id) );
            }
        }
    }