fixes #1055 prevents XSS on original resize fields

2026-07-05 01:12:29 +02:00 · 2019-08-09 15:52:04 +02:00
parent bc0b49cdad
commit fdcb6f50f6
1 changed files with 1 additions and 1 deletions
@@ -250,7 +250,7 @@ else
      $template->append(
        'sizes',
        array(
-          $field => $_POST[$field]
+          $field => strip_tags($_POST[$field]) // strip_tags prevents from XSS attempt
          ),
        true
        );