-
Notifications
You must be signed in to change notification settings - Fork 6
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
equella_search_api.php sanitise vars #5
Comments
clean_param() is probably an easy function that could be used. |
Hi Dan! Just a heads-up, everyone in this organisation no longer works for EQUELLA (Pearson), so all projects here are not maintained (so far). |
haha - good to know thanks Dongsheng! |
Although, feel free to submit pull requests :) |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
it would be nice if some of the vars returned by the equella search api were sanitised before injecting directly in the html. particularly:
$itemUuid, $itemUrl, $itemFile, $attUuid
The text was updated successfully, but these errors were encountered: