Merge pull request #84 from roddux/xss-patch-devel

Fix for XSS bug
This commit is contained in:
Adam Warner
2016-04-22 14:38:37 +01:00
+13 -1
View File
@@ -47,6 +47,18 @@
$data = array_merge($data, getAllQueries());
}
function filterArray(&$a) {
$sanArray = array();
foreach ($a as $k=>$v) {
if (is_array($v)) {
$sanArray[htmlspecialchars($k)] = filterArray($v);
} else {
$sanArray[htmlspecialchars($k)] = htmlspecialchars($v);
}
}
return $sanArray;
}
$data = filterArray($data);
echo json_encode($data);
?>