diff --git a/include/utils/VtlibUtils.php b/include/utils/VtlibUtils.php index 0922f46f9a56adafe36bd11422775b42efa16053..109e01ca0037785262fbf78ee391248484ef242c 100644 --- a/include/utils/VtlibUtils.php +++ b/include/utils/VtlibUtils.php @@ -530,6 +530,13 @@ function vtlib_tosingular($text) { return $text; } +/** + * Helps to remove HTML tags and attributes. + */ +function vtlib_strip_tagattrs($str) { + return preg_replace('/=/', '-', strip_tags($str)); +} + /** * Get picklist values that is accessible by all roles. */ diff --git a/modules/Users/Users.php b/modules/Users/Users.php index b0ad5bd58992e3ea6253da2f59808d1ae4b4b36b..4c1559fab546fe54720fed2e6fda3866c13e98e0 100755 --- a/modules/Users/Users.php +++ b/modules/Users/Users.php @@ -779,7 +779,7 @@ class Users extends CRMEntity { } $userlabel = trim(decode_html($userlabel)); - $this->column_fields['userlabel'] = strip_tags($userlabel); + $this->column_fields['userlabel'] = vtlib_strip_tagattrs($userlabel); } if($insertion_mode == 'edit') {