fixes GHSA-p362-cfpj-q55f protect against CSRF on batch manager unit mode

2026-07-06 01:42:29 +02:00 · 2024-02-12 16:51:53 +01:00
parent 562170528c
commit e95036b92a
3 changed files with 4 additions and 1 deletions
@@ -2862,7 +2862,7 @@ function get_tag_ids($raw_tags, $allow_create=true)
    elseif ($allow_create)
    {
      // we have to create a new tag
-      $tag_ids[] = tag_id_from_tag_name($raw_tag);
+      $tag_ids[] = tag_id_from_tag_name(strip_tags($raw_tag));
    }
  }