security: Fix some reported security issues (#4807)

This commit is contained in:
Neil Lathwood
2016-10-15 20:45:18 +01:00
committed by GitHub
parent da0d04a5b6
commit a2f2ccfd2c
9 changed files with 34 additions and 12 deletions

View File

@@ -33,5 +33,5 @@ if (defined('SHOW_SETTINGS') || empty($widget_settings)) {
</div>
</form>';
} else {
$common_output[] = stripslashes(nl2br($widget_settings['notes']));
$common_output[] = stripslashes(nl2br(htmlentities($widget_settings['notes'])));
}