update xss security

microweber · Feb 14, 2022 · 2876260 · 2876260
1 parent 43efb2d
commit 2876260
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 3 deletions.
diff --git a/src/MicroweberPackages/CustomField/FieldsManager.php b/src/MicroweberPackages/CustomField/FieldsManager.php
@@ -3,6 +3,7 @@
 namespace MicroweberPackages\CustomField;
 
 use MicroweberPackages\CustomField\Fields\Text;
+use MicroweberPackages\Helper\HTMLClean;
 use MicroweberPackages\Helper\XSSSecurity;
 use function Matrix\trace;
 use MicroweberPackages\CustomField\Events\CustomFieldWasDeleted;
@@ -306,8 +307,8 @@ public function save($fieldData)
             return false;
         }
 
-        $xssClean = new XSSSecurity();
-        $fieldData = $xssClean->clean($fieldData);
+        $xssClean = new HTMLClean();
+        $fieldData = $xssClean->cleanArray($fieldData);
 
         if (isset($fieldData['copy_of']) and $fieldData['copy_of']) {
 

diff --git a/src/MicroweberPackages/Helper/HTMLClean.php b/src/MicroweberPackages/Helper/HTMLClean.php
@@ -5,11 +5,16 @@
 class HTMLClean
 {
     public function cleanArray($array) {
+
         if (is_array($array)) {
 
             $cleanedArray = [];
             foreach ($array as $key=>$value) {
-                $cleanedArray[$key] = $this->clean($value);
+                if (is_array($value)) {
+                    $cleanedArray[$key] = $this->cleanArray($value);
+                } else {
+                    $cleanedArray[$key] = $this->clean($value);
+                }
             }
 
             return $cleanedArray;

diff --git a/src/MicroweberPackages/Option/OptionManager.php b/src/MicroweberPackages/Option/OptionManager.php
@@ -14,6 +14,7 @@
 
 use DB;
 use Cache;
+use MicroweberPackages\Helper\HTMLClean;
 use MicroweberPackages\Option\Models\ModuleOption;
 use MicroweberPackages\Option\Models\Option;
 use MicroweberPackages\Option\Traits\ModuleOptionTrait;
@@ -349,6 +350,10 @@ public function save($data)
             $data = parse_params($data);
         }
 
+        $xssClean = new HTMLClean();
+        $data = $xssClean->cleanArray($data); 
+
+
         $this->clear_memory();
         app()->option_repository->clearCache();