bitPickups/friendica_2019-12_sharedHosting_hotFix
1
1
Fork 0
Code Pull requests Activity

Contact search is now escaped

Browse source
This commit is contained in:
Michael 2018-11-25 19:48:26 +00:00
parent 56f21a4b89
commit 4ce320fc79
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
mod/acl.php
View file

@ -127,7 +127,7 @@ function acl_content(App $a)
$groups[] = [ $groups[] = [
'type' => 'g', 'type' => 'g',
'photo' => 'images/twopeople.png', 'photo' => 'images/twopeople.png',
'name' => htmlentities($g['name']), 'name' => htmlspecialchars($g['name']),
'id' => intval($g['id']), 'id' => intval($g['id']),
'uids' => array_map('intval', explode(',', $g['uids'])), 'uids' => array_map('intval', explode(',', $g['uids'])),
'link' => '', 'link' => '',
@ -198,7 +198,7 @@ function acl_content(App $a)
foreach ($r as $g) { foreach ($r as $g) {
$contacts[] = [ $contacts[] = [
'photo' => ProxyUtils::proxifyUrl($g['photo'], false, ProxyUtils::SIZE_MICRO), 'photo' => ProxyUtils::proxifyUrl($g['photo'], false, ProxyUtils::SIZE_MICRO),
'name' => $g['name'], 'name' => htmlspecialchars($g['name']),
'nick' => defaults($g, 'addr', $g['url']), 'nick' => defaults($g, 'addr', $g['url']),
'network' => $g['network'], 'network' => $g['network'],
'link' => $g['url'], 'link' => $g['url'],
@ -220,7 +220,7 @@ function acl_content(App $a)
$entry = [ $entry = [
'type' => 'c', 'type' => 'c',
'photo' => ProxyUtils::proxifyUrl($g['micro'], false, ProxyUtils::SIZE_MICRO), 'photo' => ProxyUtils::proxifyUrl($g['micro'], false, ProxyUtils::SIZE_MICRO),
'name' => htmlentities($g['name']), 'name' => htmlspecialchars($g['name']),
'id' => intval($g['id']), 'id' => intval($g['id']),
'network' => $g['network'], 'network' => $g['network'],
'link' => $g['url'], 'link' => $g['url'],
@ -281,7 +281,7 @@ function acl_content(App $a)
$unknown_contacts[] = [ $unknown_contacts[] = [
'type' => 'c', 'type' => 'c',
'photo' => ProxyUtils::proxifyUrl($contact['micro'], false, ProxyUtils::SIZE_MICRO), 'photo' => ProxyUtils::proxifyUrl($contact['micro'], false, ProxyUtils::SIZE_MICRO),
'name' => htmlentities($contact['name']), 'name' => htmlspecialchars($contact['name']),
'id' => intval($contact['cid']), 'id' => intval($contact['cid']),
'network' => $contact['network'], 'network' => $contact['network'],
'link' => $contact['url'], 'link' => $contact['url'],