HOR-282 Adds XSS filtering to changeStatus.
This commit is contained in:
@@ -118,7 +118,7 @@ class ProcessProxy extends HttpProxyController
|
|||||||
$oProcess = new Processes();
|
$oProcess = new Processes();
|
||||||
if (count( $ids ) > 0) {
|
if (count( $ids ) > 0) {
|
||||||
foreach ($ids as $id) {
|
foreach ($ids as $id) {
|
||||||
$oProcess->changeStatus( $id );
|
$oProcess->changeStatus( htmlspecialchars($id) );
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user