fix: added missing conversion to HTML entities

thorsten · Nov 27, 2022 · 1d73af3 · 1d73af3
1 parent e2ea332
commit 1d73af3
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/phpmyfaq/admin/index.php b/phpmyfaq/admin/index.php
@@ -119,6 +119,7 @@
 if (is_null($action)) {
     $action = Filter::filterInput(INPUT_POST, 'action', FILTER_UNSAFE_RAW);
 }
+$action = Strings::htmlentities($action);
 
 //
 // Get CSRF Token