diff options
author | Igor Scheller <igor.scheller@igorshp.de> | 2018-12-28 22:32:36 +0100 |
---|---|---|
committer | msquare <msquare@notrademark.de> | 2018-12-28 23:08:39 +0100 |
commit | 012d5a47227ad80753fc1178ccc85c3b15dd5c09 (patch) | |
tree | ffd921e749fdfa7102505ad03d10b318203c8450 /includes/sys_page.php | |
parent | 540efef63ebee72853be4f79a0cf689b62bcc339 (diff) |
Don't strip characters from direct messages
Diffstat (limited to 'includes/sys_page.php')
-rw-r--r-- | includes/sys_page.php | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/includes/sys_page.php b/includes/sys_page.php index a560c3ba..e94a92cc 100644 --- a/includes/sys_page.php +++ b/includes/sys_page.php @@ -197,6 +197,7 @@ function strip_request_item_nl($name, $default_value = null) { $request = request(); if ($request->has($name)) { + // Only allow letters, symbols, punctuation, separators, numbers and newlines without html tags return preg_replace( "/([^\p{L}\p{S}\p{P}\p{Z}\p{N}+\n]{1,})/ui", '', @@ -214,6 +215,7 @@ function strip_request_item_nl($name, $default_value = null) */ function strip_item($item) { + // Only allow letters, symbols, punctuation, separators and numbers without html tags return preg_replace("/([^\p{L}\p{S}\p{P}\p{Z}\p{N}+]{1,})/ui", '', strip_tags($item)); } |