xss fix on tagging module

microweber · Feb 10, 2022 · 14a1bb9 · 14a1bb9
1 parent ccacc52
commit 14a1bb9
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 1 deletion.
diff --git a/src/MicroweberPackages/Helper/HTMLClean.php b/src/MicroweberPackages/Helper/HTMLClean.php
@@ -4,6 +4,18 @@
 
 class HTMLClean
 {
+    public function cleanArray($array) {
+        if (is_array($array)) {
+
+            $cleanedArray = [];
+            foreach ($array as $key=>$value) {
+                $cleanedArray[$key] = $this->clean($value);
+            }
+
+            return $cleanedArray;
+        }
+    }
+
     public function clean($html) {
 
         $antiXss = new \voku\helper\AntiXSS();

diff --git a/userfiles/modules/tags/TaggingTagsManager.php b/userfiles/modules/tags/TaggingTagsManager.php
@@ -66,6 +66,9 @@ function tagging_tag_edit($params) {
         $newData['id'] = $params['id'];
     }
 
+    $cleanInput = new \MicroweberPackages\Helper\HTMLClean();
+    $newData = $cleanInput->cleanArray($newData);
+
     if (isset($params['tagging_tag_id']) && !empty($params['tagging_tag_id'])) {
         $tagging_tag_id = $params['tagging_tag_id'];
         $tag = db_get('tagging_tags', [
@@ -105,7 +108,6 @@ function tagging_tag_edit($params) {
         }
     }
 
-
     $tagSaved = db_save('tagging_tags',$newData);
     if ($tagSaved) {