diff options
| author | Mario Vavti <mario@mariovavti.com> | 2019-03-18 21:30:25 +0100 |
|---|---|---|
| committer | Mario Vavti <mario@mariovavti.com> | 2019-03-18 21:30:25 +0100 |
| commit | 968c6ed8be580c1098587738fefa27b31dc4f5ef (patch) | |
| tree | 58bd02f3bffd7c9016246fd0ca7994a9b7386d86 /Zotlabs/Module/Pubstream.php | |
| parent | 2ec3e4a912777501f232d6255fe8ba5d0c147eee (diff) | |
| download | volse-hubzilla-968c6ed8be580c1098587738fefa27b31dc4f5ef.tar.gz volse-hubzilla-968c6ed8be580c1098587738fefa27b31dc4f5ef.tar.bz2 volse-hubzilla-968c6ed8be580c1098587738fefa27b31dc4f5ef.zip | |
some more xss prevention
Diffstat (limited to 'Zotlabs/Module/Pubstream.php')
| -rw-r--r-- | Zotlabs/Module/Pubstream.php | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/Zotlabs/Module/Pubstream.php b/Zotlabs/Module/Pubstream.php index 94df29984..84ac42f72 100644 --- a/Zotlabs/Module/Pubstream.php +++ b/Zotlabs/Module/Pubstream.php @@ -149,11 +149,11 @@ class Pubstream extends \Zotlabs\Web\Controller { '$order' => 'comment', '$file' => '', '$cats' => '', - '$tags' => $hashtags, + '$tags' => (($hashtags) ? urlencode($hashtags) : ''), '$dend' => '', - '$mid' => $mid, + '$mid' => (($mid) ? urlencode($mid) : ''), '$verb' => '', - '$net' => $net, + '$net' => (($net) ? urlencode($net) : ''), '$dbegin' => '' )); } |