added sanitize tab name on add and edit

causefx · Apr 10, 2022 · fd5315d · fd5315d
1 parent b225527
commit fd5315d
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/api/classes/organizr.class.php b/api/classes/organizr.class.php
@@ -4873,6 +4873,7 @@ public function addTab($array)
 		$array['type'] = ($array['type']) ?? 1;
 		$array['order'] = ($array['order']) ?? $this->getNextTabOrder() + 1;
 		if (array_key_exists('name', $array)) {
+			$array['name'] = filter_var($array['name'], FILTER_SANITIZE_STRING);
 			if ($this->isTabNameTaken($array['name'])) {
 				$this->setAPIResponse('error', 'Tab name: ' . $array['name'] . ' is already taken', 409);
 				return false;
@@ -4922,6 +4923,7 @@ public function updateTab($id, $array)
 			return false;
 		}
 		if (array_key_exists('name', $array)) {
+			$array['name'] = filter_var($array['name'], FILTER_SANITIZE_STRING);
 			if ($this->isTabNameTaken($array['name'], $id)) {
 				$this->setAPIResponse('error', 'Tab name: ' . $array['name'] . ' is already taken', 409);
 				return false;