From b6e0583af835eebcde5f53f9f83effa6d921976d Mon Sep 17 00:00:00 2001
From: Vincent Augagneur <vincent.augagneur@prestashop.com>
Date: Mon, 9 Sep 2013 18:47:15 +0200
Subject: [PATCH] //added security check on dashboard

---
 controllers/admin/AdminDashboardController.php | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/controllers/admin/AdminDashboardController.php b/controllers/admin/AdminDashboardController.php
index 42139f5af..fc7df91ec 100644
--- a/controllers/admin/AdminDashboardController.php
+++ b/controllers/admin/AdminDashboardController.php
@@ -107,8 +107,11 @@ class AdminDashboardControllerCore extends AdminController
 			$articles_limit = 3;
 			foreach ($rss->channel->item as $item)
 			{
-				if ($articles_limit > 0)
-					$return['rss'][] = array('title' => (string)$item->title, 'short_desc' => (string)$item->description);
+				if ($articles_limit > 0 && Validate::isCleanHtml((string)$item->title) && Validate::isCleanHtml((string)$item->description))
+					$return['rss'][] = array(
+						'title' => (string)$item->title,
+						'short_desc' => (string)$item->description
+					);
 				else
 					break;
 				$articles_limit --;