don't allow html in plugin comment blocks

2017-05-09 20:33:25 -07:00
parent 9a66d47d54
commit 87b424123b
1 changed files with 1 additions and 0 deletions
--- a/include/plugin.php
+++ b/include/plugin.php
@@ -356,6 +356,7 @@ function get_plugin_info($plugin){
 		return $info;

 	$f = file_get_contents("addon/$plugin/$plugin.php");
+	$f = escape_tags($f);
 	$r = preg_match("|/\*.*\*/|msU", $f, $m);

 	if ($r){