Fix xss

orvice · Jun 20, 2017 · 3936798 · 3936798
1 parent 015a73d
commit 3936798
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/app/Controllers/AuthController.php b/app/Controllers/AuthController.php
@@ -82,7 +82,7 @@ public function register($request, $response, $args)
         $ary = $request->getQueryParams();
         $code = "";
         if (isset($ary['code'])) {
-            $code = $ary['code'];
+            $code = Tools::checkHtml($ary['code']);
         }
         $requireEmailVerification = Config::get('emailVerifyEnabled');
         return $this->view()->assign('code', $code)->assign('requireEmailVerification', $requireEmailVerification)->display('auth/register.tpl');

diff --git a/bootstrap/app.php b/bootstrap/app.php
@@ -11,7 +11,7 @@
 
 //  BASE_PATH
 define('BASE_PATH', __DIR__ . '/../');
-define('VERSION', '3.4.5');
+define('VERSION', '3.4.6');
 
 // Vendor Autoload
 require BASE_PATH . '/vendor/autoload.php';