github/torrentpier
1
0
Fork 0
mirror of https://github.com/torrentpier/torrentpier synced 2025-08-14 10:37:30 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Use strip_tags() for error message in ajax_die() (#990)

Browse source
This commit is contained in:
Roman Kelesidis 2023-10-26 15:07:39 +07:00 • committed by GitHub
commit 8765aaaa3a
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
library/ajax/edit_user_profile.php
View file

@ -27,7 +27,7 @@ switch ($field) {
case 'username':
$value = clean_username($value);
if ($err = \TorrentPier\Validate::username($value)) {
$this->ajax_die(strip_tags($err));
$this->ajax_die($err);
}
$this->response['new_value'] = $this->request['value'];
break;