//added security check on dashboard

This commit is contained in:
Vincent Augagneur
2013-09-09 18:47:15 +02:00
parent 4e1a513371
commit b6e0583af8
@@ -107,8 +107,11 @@ class AdminDashboardControllerCore extends AdminController
$articles_limit = 3; $articles_limit = 3;
foreach ($rss->channel->item as $item) foreach ($rss->channel->item as $item)
{ {
if ($articles_limit > 0) if ($articles_limit > 0 && Validate::isCleanHtml((string)$item->title) && Validate::isCleanHtml((string)$item->description))
$return['rss'][] = array('title' => (string)$item->title, 'short_desc' => (string)$item->description); $return['rss'][] = array(
'title' => (string)$item->title,
'short_desc' => (string)$item->description
);
else else
break; break;
$articles_limit --; $articles_limit --;