MDL-28726 wiki-2.0: Fixed XSS in wiki comments

2011-09-16 11:11:32 +08:00
parent 3df2ab8d98
commit 7039fa8d96
1 changed files with 1 additions and 1 deletions
@@ -643,7 +643,7 @@ class page_wiki_comments extends page_wiki {
                    $parsedcontent = wiki_parse_content('nwiki', $comment->content, $options);
                }

-                $cell4->text = html_entity_decode($parsedcontent['parsed_text']);
+                $cell4->text = format_text(html_entity_decode($parsedcontent['parsed_text']), FORMAT_HTML);
            } else {
                $cell4->text = format_text($comment->content, FORMAT_HTML);
            }