escape tags on viewsrc output in case it is not text/bbcode.
This commit is contained in:
parent
e9243e9660
commit
919de44a71
@ -36,7 +36,9 @@ class Viewsrc extends \Zotlabs\Web\Controller {
|
|||||||
if($r) {
|
if($r) {
|
||||||
if(intval($r[0]['item_obscured']))
|
if(intval($r[0]['item_obscured']))
|
||||||
$r[0]['body'] = crypto_unencapsulate(json_decode($r[0]['body'],true),get_config('system','prvkey'));
|
$r[0]['body'] = crypto_unencapsulate(json_decode($r[0]['body'],true),get_config('system','prvkey'));
|
||||||
$o = (($json) ? json_encode($r[0]['body']) : str_replace("\n",'<br />',$r[0]['body']));
|
|
||||||
|
$content = escape_tags($r[0]['body']);
|
||||||
|
$o = (($json) ? json_encode($content) : str_replace("\n",'<br />',$content));
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user