(cp e95036b92) fixes GHSA-p362-cfpj-q55f protect against CSRF on batch manager unit mode

2026-06-19 17:45:27 +02:00 · 2024-02-12 16:52:58 +01:00
parent df8e34b97f
commit 08dc815d53
3 changed files with 4 additions and 1 deletions
@@ -2862,7 +2862,7 @@ function get_tag_ids($raw_tags, $allow_create=true)
    elseif ($allow_create)
    {
      // we have to create a new tag
-      $tag_ids[] = tag_id_from_tag_name($raw_tag);
+      $tag_ids[] = tag_id_from_tag_name(strip_tags($raw_tag));
    }
  }