aboutsummaryrefslogtreecommitdiffstats
path: root/include/network.php
diff options
context:
space:
mode:
authorMario Vavti <mario@mariovavti.com>2018-07-29 06:43:55 +0200
committerMario Vavti <mario@mariovavti.com>2018-07-29 06:43:55 +0200
commit3fcb6df0f1ee73216935a7c29d0a82d32bd61109 (patch)
treefeadfe9a7ae175e9b92214be68b388d4bf0a2ab4 /include/network.php
parent27329e39e49d4a3754196e38b8c1bfa812279b99 (diff)
parent97015162282989913d6b54c373af3b73b8043bad (diff)
downloadvolse-hubzilla-3fcb6df0f1ee73216935a7c29d0a82d32bd61109.tar.gz
volse-hubzilla-3fcb6df0f1ee73216935a7c29d0a82d32bd61109.tar.bz2
volse-hubzilla-3fcb6df0f1ee73216935a7c29d0a82d32bd61109.zip
Merge remote-tracking branch 'mike/master' into dev
Diffstat (limited to 'include/network.php')
-rw-r--r--include/network.php16
1 files changed, 8 insertions, 8 deletions
diff --git a/include/network.php b/include/network.php
index 91a39a6cb..0d37db58d 100644
--- a/include/network.php
+++ b/include/network.php
@@ -1923,23 +1923,23 @@ function scrape_vcard($url) {
$level2 = $item->getElementsByTagName('*');
foreach($level2 as $x) {
if(attribute_contains($x->getAttribute('id'),'pod_location'))
- $ret['pod_location'] = $x->textContent;
+ $ret['pod_location'] = escape_tags($x->textContent);
if(attribute_contains($x->getAttribute('class'),'fn'))
- $ret['fn'] = $x->textContent;
+ $ret['fn'] = escape_tags($x->textContent);
if(attribute_contains($x->getAttribute('class'),'uid'))
- $ret['uid'] = $x->textContent;
+ $ret['uid'] = escape_tags($x->textContent);
if(attribute_contains($x->getAttribute('class'),'nickname'))
- $ret['nick'] = $x->textContent;
+ $ret['nick'] = escape_tags($x->textContent);
if(attribute_contains($x->getAttribute('class'),'searchable'))
- $ret['searchable'] = $x->textContent;
+ $ret['searchable'] = escape_tags($x->textContent);
if(attribute_contains($x->getAttribute('class'),'key'))
$ret['public_key'] = $x->textContent;
if(attribute_contains($x->getAttribute('class'),'given_name'))
- $ret['given_name'] = $x->textContent;
+ $ret['given_name'] = escape_tags($x->textContent);
if(attribute_contains($x->getAttribute('class'),'family_name'))
- $ret['family_name'] = $x->textContent;
+ $ret['family_name'] = escxape_tags($x->textContent);
if(attribute_contains($x->getAttribute('class'),'url'))
- $ret['url'] = $x->textContent;
+ $ret['url'] = escape_tags($x->textContent);
if((attribute_contains($x->getAttribute('class'),'photo'))
|| (attribute_contains($x->getAttribute('class'),'avatar'))) {