summaryrefslogtreecommitdiff
path: root/includes/sys_page.php
diff options
context:
space:
mode:
authorIgor Scheller <igor.scheller@igorshp.de>2018-12-28 22:32:36 +0100
committermsquare <msquare@notrademark.de>2018-12-28 23:08:39 +0100
commit012d5a47227ad80753fc1178ccc85c3b15dd5c09 (patch)
treeffd921e749fdfa7102505ad03d10b318203c8450 /includes/sys_page.php
parent540efef63ebee72853be4f79a0cf689b62bcc339 (diff)
Don't strip characters from direct messages
Diffstat (limited to 'includes/sys_page.php')
-rw-r--r--includes/sys_page.php2
1 files changed, 2 insertions, 0 deletions
diff --git a/includes/sys_page.php b/includes/sys_page.php
index a560c3ba..e94a92cc 100644
--- a/includes/sys_page.php
+++ b/includes/sys_page.php
@@ -197,6 +197,7 @@ function strip_request_item_nl($name, $default_value = null)
{
$request = request();
if ($request->has($name)) {
+ // Only allow letters, symbols, punctuation, separators, numbers and newlines without html tags
return preg_replace(
"/([^\p{L}\p{S}\p{P}\p{Z}\p{N}+\n]{1,})/ui",
'',
@@ -214,6 +215,7 @@ function strip_request_item_nl($name, $default_value = null)
*/
function strip_item($item)
{
+ // Only allow letters, symbols, punctuation, separators and numbers without html tags
return preg_replace("/([^\p{L}\p{S}\p{P}\p{Z}\p{N}+]{1,})/ui", '', strip_tags($item));
}