From 6b5967198e43b6fbb3b2715b49c6cd5b12ce08c3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rados=C5=82aw=20Skrzypczak?= <r.skrzypczak@yetiforce.com>
Date: Wed, 15 Dec 2021 07:54:00 +0100
Subject: [PATCH] Improved MeetingUrl uitype

---
 config/version.php                                   |  4 ++--
 layouts/basic/modules/Vtiger/Modals/MeetingModal.tpl | 10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/config/version.php b/config/version.php
index 4d254046b9b1..6cf810d0af76 100644
--- a/config/version.php
+++ b/config/version.php
@@ -1,7 +1,7 @@
 <?php
 
 return [
-	'appVersion' => '6.3.7',
-	'patchVersion' => '2021.12.14',
+	'appVersion' => '6.3.8',
+	'patchVersion' => '2021.12.15',
 	'lib_roundcube' => '0.2.3',
 ];
diff --git a/layouts/basic/modules/Vtiger/Modals/MeetingModal.tpl b/layouts/basic/modules/Vtiger/Modals/MeetingModal.tpl
index 2967a5f71453..5f578e9c49a0 100644
--- a/layouts/basic/modules/Vtiger/Modals/MeetingModal.tpl
+++ b/layouts/basic/modules/Vtiger/Modals/MeetingModal.tpl
@@ -12,7 +12,7 @@
 						<div class="row mb-3 mt-2">
 							<div class="col-xs-6 mx-auto">
 								<span class="m-1 u-fs-4x yfi-guest-link text-success js-clipboard u-cursor-pointer" data-js="click"
-									data-copy-attribute="clipboard-text" data-clipboard-text="{$MEETING_GUEST_URL}"
+									data-copy-attribute="clipboard-text" data-clipboard-text="{\App\Purifier::encodeHtml($MEETING_GUEST_URL)}"
 									title="{\App\Language::translate('BTN_COPY_TO_CLIPBOARD', $MODULE_NAME)}">
 								</span>
 								<div class="text-center text-success">
@@ -21,7 +21,7 @@
 							</div>
 							{if $SIMPLE_URL && !$MEETING_URL}
 								<div class="col-xs-6 mx-auto">
-									<a class="m-1 u-fs-4x yfi-enter-guest text-success" href="{$MEETING_GUEST_URL}" rel="noreferrer noopener" target="_blank"
+									<a class="m-1 u-fs-4x yfi-enter-guest text-success" href="{\App\Purifier::encodeHtml($MEETING_GUEST_URL)}" rel="noreferrer noopener" target="_blank"
 										title="{\App\Language::translate('LBL_MEETING_JOIN', $MODULE_NAME)}">
 									</a>
 									<div class="text-success">
@@ -68,7 +68,7 @@
 									{else}
 										{assign var=URLDATA value=OSSMail_Module_Model::getExternalUrl($MODULE_NAME, $RECORD_ID, 'Detail', 'new')}
 										{if $URLDATA}
-											<a class="m-1 yfi-send-invitation text-info u-fs-4x" href="{$URLDATA}"
+											<a class="m-1 yfi-send-invitation text-info u-fs-4x" href="{\App\Purifier::encodeHtml($URLDATA)}"
 												title="{\App\Language::translate('LBL_MEETING_SEND_INVITATION', $MODULE_NAME)}">
 											</a>
 											<div class="text-center text-info">
@@ -95,7 +95,7 @@
 							<div class="mb-3 mt-2 row">
 								<div class="col-xs-6 mx-auto">
 									<span class="m-1 u-fs-4x yfi-moderator-link text-danger js-clipboard u-cursor-pointer" data-js="click"
-										data-copy-attribute="clipboard-text" data-clipboard-text="{$MEETING_URL}"
+										data-copy-attribute="clipboard-text" data-clipboard-text="{\App\Purifier::encodeHtml($MEETING_URL)}"
 										title="{\App\Language::translate('BTN_COPY_TO_CLIPBOARD', $MODULE_NAME)}">
 									</span>
 									<div class="text-center text-danger">
@@ -103,7 +103,7 @@
 									</div>
 								</div>
 								<div class="col-xs-6 mx-auto">
-									<a class="m-1 u-fs-4x yfi-enter-moderator text-danger" href="{$MEETING_URL}" rel="noreferrer noopener" target="_blank"
+									<a class="m-1 u-fs-4x yfi-enter-moderator text-danger" href="{\App\Purifier::encodeHtml($MEETING_URL)}" rel="noreferrer noopener" target="_blank"
 										title="{\App\Language::translate('LBL_MEETING_JOIN', $MODULE_NAME)}">
 									</a>
 									<div class="text-danger">