Fixing XSS security issue.

2015-11-07 10:44:44 +01:00
parent 8883235daa
commit 36eb076648
1 changed files with 1 additions and 1 deletions
--- a/editor/editor.php
+++ b/editor/editor.php
@@ -52,7 +52,7 @@ if (isset($_GET['debug'])) {
 	<script type="text/javascript" src="/Mergely/lib/searchcursor.js"></script>

 	<script type="text/javascript">
-        var key = '<?php echo $key; ?>';
+        var key = '<?php echo htmlspecialchars($key, ENT_QUOTES, 'UTF-8'); ?>';
        var isSample = key == 'usaindep';
    </script>