mirror of
https://github.com/silverstripe/silverstripe-blog
synced 2024-10-22 11:05:58 +02:00
BUGFIX Fixed XSS vulnerability in BlogTree? when filtering by tags
This commit is contained in:
parent
965b81c0a3
commit
a6734d3609
@ -222,7 +222,7 @@ class BlogTree extends Page {
|
|||||||
|
|
||||||
class BlogURL {
|
class BlogURL {
|
||||||
static function tag() {
|
static function tag() {
|
||||||
if (Director::urlParam('Action') == 'tag') return Director::urlParam('ID');
|
if (Director::urlParam('Action') == 'tag') return Convert::raw2xml(Director::urlParam('ID'));
|
||||||
return '';
|
return '';
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user