Filter flags values before saving them

This commit is contained in:
Amine Ben hammou
2019-03-18 17:54:27 +01:00
committed by M. Shull
parent f208a25f9a
commit dd497d93c6

View File

@ -33,6 +33,7 @@ class UserFlags extends APIEndpoint {
)); ));
} else { } else {
foreach ($flags as $name => $value) { foreach ($flags as $name => $value) {
$value = htmlspecialchars($value);
$this->user_flags->set($name, $value); $this->user_flags->set($name, $value);
} }
return $this->successResponse([]); return $this->successResponse([]);