MDL-28726 wiki-2.0: Fixed XSS in wiki comments

2011-09-16 11:07:11 +08:00
parent 9cfaebbd0e
commit a459fd9062
1 changed files with 1 additions and 1 deletions
@@ -643,7 +643,7 @@ class page_wiki_comments extends page_wiki {
                    $parsedcontent = wiki_parse_content('nwiki', $comment->content, $options);
                }

-                $cell4->text = html_entity_decode($parsedcontent['parsed_text']);
+                $cell4->text = format_text(html_entity_decode($parsedcontent['parsed_text']), FORMAT_HTML);
            } else {
                $cell4->text = format_text($comment->content, FORMAT_HTML);
            }