dinislage/PrestaShop
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

//added security check on dashboard

Browse Source
This commit is contained in:
Vincent Augagneur
2013-09-09 18:47:15 +02:00
parent 4e1a513371
commit b6e0583af8
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
controllers/admin/AdminDashboardController.php
+5 -2
View File
@@ -107,8 +107,11 @@ class AdminDashboardControllerCore extends AdminController
$articles_limit = 3;
foreach ($rss->channel->item as $item)
{
if ($articles_limit > 0)
$return['rss'][] = array('title' => (string)$item->title, 'short_desc' => (string)$item->description);
if ($articles_limit > 0 && Validate::isCleanHtml((string)$item->title) && Validate::isCleanHtml((string)$item->description))
$return['rss'][] = array(
'title' => (string)$item->title,
'short_desc' => (string)$item->description
);
else
break;
$articles_limit --;