Skip to content
Snippets Groups Projects
Commit 4d4f12b5 authored by Uma's avatar Uma
Browse files

Fixes #1220 XSS vulnerability is addressed

parent b402f424
No related branches found
No related tags found
1 merge request!510Fixes #1220 XSS vulnerability is addressed
No preview for this file type
......@@ -73,11 +73,6 @@ class ModComments_SaveAjax_Action extends Vtiger_SaveAjax_Action {
*/
public function getRecordModelFromRequest(Vtiger_Request $request) {
$recordModel = parent::getRecordModelFromRequest($request);
// $commentContent = $request->getRaw('commentcontent');
// $purifiedContent = vtlib_purify(decode_html($commentContent));
// // Purify malicious html event attributes
// $fieldValue = purifyHtmlEventAttributes(decode_html($purifiedContent),true);
$recordModel->set('commentcontent', $request->getRaw('commentcontent'));
$recordModel->set('is_private', $request->get('is_private'));
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment