From f9d4ab44e0be383a7b9d9f6d429c21956bd8cfb4 Mon Sep 17 00:00:00 2001 From: Rajesh Taneja Date: Fri, 16 Sep 2011 11:07:11 +0800 Subject: [PATCH] MDL-28726 wiki-2.0: Fixed XSS in wiki comments --- mod/wiki/pagelib.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mod/wiki/pagelib.php b/mod/wiki/pagelib.php index 751a0013528..0ad777b0fe8 100644 --- a/mod/wiki/pagelib.php +++ b/mod/wiki/pagelib.php @@ -643,7 +643,7 @@ class page_wiki_comments extends page_wiki { $parsedcontent = wiki_parse_content('nwiki', $comment->content, $options); } - $cell4->text = html_entity_decode($parsedcontent['parsed_text']); + $cell4->text = format_text(html_entity_decode($parsedcontent['parsed_text']), FORMAT_HTML); } else { $cell4->text = format_text($comment->content, FORMAT_HTML); }