Jelajahi Sumber

Fix htmlspecialchars for search (#8306)

Regression from https://github.com/FreshRSS/FreshRSS/pull/8293
Alexandre Alapetite 3 bulan lalu
induk
melakukan
044f066c1c
2 mengubah file dengan 2 tambahan dan 2 penghapusan
  1. 1 1
      app/Controllers/indexController.php
  2. 1 1
      app/layout/header.phtml

+ 1 - 1
app/Controllers/indexController.php

@@ -106,7 +106,7 @@ class FreshRSS_index_Controller extends FreshRSS_ActionController {
 		$title = FreshRSS_Context::$name;
 		$search = FreshRSS_Context::$search->__toString();
 		if ($search !== '') {
-			$title = '“' . $search . '”';
+			$title = '“' . htmlspecialchars($search, ENT_COMPAT, 'UTF-8') . '”';
 		}
 		if (FreshRSS_Context::$get_unread > 0) {
 			$title = '(' . FreshRSS_Context::$get_unread . ') ' . $title;

+ 1 - 1
app/layout/header.phtml

@@ -40,7 +40,7 @@
 			<?php } ?>
 			<div class="stick">
 				<input type="search" name="search" id="search"
-					value="<?= FreshRSS_Context::$search->__toString() ?>"
+					value="<?= htmlspecialchars(FreshRSS_Context::$search->__toString(), ENT_COMPAT, 'UTF-8') ?>"
 					placeholder="<?= _t('gen.menu.search') ?>" />
 				<button class="btn" type="submit"><?= _i('search') ?></button>
 			</div>