Skip to content
Snippets Groups Projects
Commit 243bc58c authored by root's avatar root
Browse files

Fixes : Xss payload in Users last name and first name issue is fixed

parent 8f777c45
No related branches found
No related tags found
1 merge request!1193Fixes : XSS payload in User's first name and last name issue is fixed.
......@@ -530,13 +530,6 @@ function vtlib_tosingular($text) {
return $text;
}
/**
* Helps to remove HTML tags and attributes.
*/
function vtlib_strip_tagattrs($str) {
return preg_replace('/=/', '-', strip_tags($str));
}
/**
* Get picklist values that is accessible by all roles.
*/
......
......@@ -779,7 +779,7 @@ class Users extends CRMEntity {
}
$userlabel = trim(decode_html($userlabel));
$this->column_fields['userlabel'] = vtlib_strip_tagattrs($userlabel);
$this->column_fields['userlabel'] = vtlib_strip_quoted(strip_tags($userlabel));
}
if($insertion_mode == 'edit') {
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment