Fix del bug #134

2018-01-31 09:50:36 +01:00 · 2018-01-31 09:50:36 +01:00 · abd26ffec0
parent ef36f98f8e
commit abd26ffec0
1 changed files with 2 additions and 2 deletions
--- a/modules/viste/actions.php
+++ b/modules/viste/actions.php
@ -40,8 +40,8 @@ switch (filter('op')) {
        $rs = true;

        foreach ((array) $post['query'] as $c => $k) {
-            // Fix per la protezone contro XSS
-            $post['query'][$c] = htmlspecialchars_decode($post['query'][$c], ENT_QUOTES);
+            // Fix per la protezone contro XSS, che interpreta la sequenza "<testo" come un tag HTML
+            $post['query'][$c] = $_POST['query'][$c];

            if (check_query($post['query'][$c])) {
                $array = [