Merge pull request from GHSA-jrwm-pr9x-cgq3

mautic · May 23, 2022 · d1518c2 · d1518c2
1 parent b9374d0
commit d1518c2
Showing 1 changed file with 5 additions and 4 deletions.
diff --git a/app/bundles/InstallBundle/Install/InstallService.php b/app/bundles/InstallBundle/Install/InstallService.php
@@ -11,6 +11,7 @@
 use Mautic\CoreBundle\Configurator\Step\StepInterface;
 use Mautic\CoreBundle\Helper\CacheHelper;
 use Mautic\CoreBundle\Helper\EncryptionHelper;
+use Mautic\CoreBundle\Helper\InputHelper;
 use Mautic\CoreBundle\Helper\PathsHelper;
 use Mautic\CoreBundle\Release\ThisRelease;
 use Mautic\InstallBundle\Configurator\Step\DoctrineStep;
@@ -464,10 +465,10 @@ public function createAdminUserStep(array $data): array
 
         $encoder = $this->encoder;
 
-        $user->setFirstName($data['firstname']);
-        $user->setLastName($data['lastname']);
-        $user->setUsername($data['username']);
-        $user->setEmail($data['email']);
+        $user->setFirstName(InputHelper::filter($data['firstname']));
+        $user->setLastName(InputHelper::filter($data['lastname']));
+        $user->setUsername(InputHelper::filter($data['username']));
+        $user->setEmail(InputHelper::email($data['email']));
         $user->setPassword($encoder->encodePassword($user, $data['password']));
 
         $adminRole = null;