avoid xss in rssfeed content

glpi-project · Jan 24, 2023 · aec5c2d · aec5c2d
1 parent e3be02c
commit aec5c2d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/RSSFeed.php b/src/RSSFeed.php
@@ -856,7 +856,7 @@ public function showFeedContent()
                     'title'     => $item->get_title(),
                     'link'      => URL::sanitizeURL($item->get_permalink()),
                     'timestamp' => Html::convDateTime($item->get_date('Y-m-d H:i:s')),
-                    'content'   => $item->get_content()
+                    'content'   => RichText::getSafeHtml($item->get_content()),
                 ];
             }
         } else {