tobias/friendica
1
0
Fork 0
Code Pull requests Activity

Ignoring OEmbed array values

Browse source
This commit is contained in:
Michael 2018-12-02 21:36:46 +00:00
parent 02a72ef04f
commit 58b614bea1
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
src/Object/OEmbed.php
View file

@ -45,6 +45,8 @@ class OEmbed
if (in_array($key, ['thumbnail_width', 'thumbnail_height', 'width', 'height'])) { if (in_array($key, ['thumbnail_width', 'thumbnail_height', 'width', 'height'])) {
// These values should be numbers, so ensure that they really are numbers. // These values should be numbers, so ensure that they really are numbers.
$value = (int)$value; $value = (int)$value;
} elseif (is_array($value)) {
// Ignoring arrays.
} elseif ($key != 'html') { } elseif ($key != 'html') {
// Avoid being able to inject some ugly stuff through these fields. // Avoid being able to inject some ugly stuff through these fields.
$value = htmlentities($value); $value = htmlentities($value);