Changeset 1061

Show
Ignore:
Timestamp:
04/09/07 14:49:36 (2 years ago)
Author:
ben
Message:

Widgets mostly can't have JS etc in them: use PARAM_CLEAN to strip tags out.

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • devel/mod/widget/edit.php

    r1059 r1061  
    4848                $widget_data = optional_param('widget_data','',null); 
    4949            } else { 
    50                 $widget_data = optional_param('widget_data'); 
     50                $widget_data = optional_param('widget_data','',PARAM_CLEAN); 
    5151            } 
    5252