diff options
| author | Mario Vavti <mario@mariovavti.com> | 2019-03-18 21:30:25 +0100 |
|---|---|---|
| committer | Mario Vavti <mario@mariovavti.com> | 2019-03-18 21:30:25 +0100 |
| commit | 968c6ed8be580c1098587738fefa27b31dc4f5ef (patch) | |
| tree | 58bd02f3bffd7c9016246fd0ca7994a9b7386d86 /Zotlabs/Module/Channel.php | |
| parent | 2ec3e4a912777501f232d6255fe8ba5d0c147eee (diff) | |
| download | volse-hubzilla-968c6ed8be580c1098587738fefa27b31dc4f5ef.tar.gz volse-hubzilla-968c6ed8be580c1098587738fefa27b31dc4f5ef.tar.bz2 volse-hubzilla-968c6ed8be580c1098587738fefa27b31dc4f5ef.zip | |
some more xss prevention
Diffstat (limited to 'Zotlabs/Module/Channel.php')
| -rw-r--r-- | Zotlabs/Module/Channel.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/Zotlabs/Module/Channel.php b/Zotlabs/Module/Channel.php index 5fdefd805..65eaee408 100644 --- a/Zotlabs/Module/Channel.php +++ b/Zotlabs/Module/Channel.php @@ -414,12 +414,12 @@ class Channel extends Controller { '$page' => ((App::$pager['page'] != 1) ? App::$pager['page'] : 1), '$search' => $search, '$xchan' => '', - '$order' => $order, + '$order' => (($order) ? urlencode($order) : ''),, '$list' => ((x($_REQUEST,'list')) ? intval($_REQUEST['list']) : 0), '$file' => '', '$cats' => (($category) ? urlencode($category) : ''), '$tags' => (($hashtags) ? urlencode($hashtags) : ''), - '$mid' => $mid, + '$mid' => (($mid) ? urlencode($mid) : ''),, '$verb' => '', '$net' => '', '$dend' => $datequery, |