tonyair/silverstripe-cms
1
0
Fork 0
mirror of https://github.com/silverstripe/silverstripe-cms synced 2024-06-18 10:41:39 +02:00
Code Issues Projects Releases Wiki Activity

Merge pull request #4 from silverstripe-security/patch/3.4/SS-2017-004

Browse Source 
[SS-2017-004] FIX Unescaped fields in CMSPageHistroyController::compare()
This commit is contained in:
Daniel Hensby 2017-05-28 22:18:35 +01:00 committed by GitHub
commit 911e491236
1 changed files with 1 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
code/controllers/CMSPageHistoryController.php
View File

@ -409,11 +409,7 @@ class CMSPageHistoryController extends CMSMain {
"ID" => $id,
"Version" => $fromVersion,
));
foreach($form->Fields()->dataFields() as $field) {
$field->dontEscape = true;
}
return $form;
}