//added security check on dashboard
This commit is contained in:
@@ -107,8 +107,11 @@ class AdminDashboardControllerCore extends AdminController
|
|||||||
$articles_limit = 3;
|
$articles_limit = 3;
|
||||||
foreach ($rss->channel->item as $item)
|
foreach ($rss->channel->item as $item)
|
||||||
{
|
{
|
||||||
if ($articles_limit > 0)
|
if ($articles_limit > 0 && Validate::isCleanHtml((string)$item->title) && Validate::isCleanHtml((string)$item->description))
|
||||||
$return['rss'][] = array('title' => (string)$item->title, 'short_desc' => (string)$item->description);
|
$return['rss'][] = array(
|
||||||
|
'title' => (string)$item->title,
|
||||||
|
'short_desc' => (string)$item->description
|
||||||
|
);
|
||||||
else
|
else
|
||||||
break;
|
break;
|
||||||
$articles_limit --;
|
$articles_limit --;
|
||||||
|
|||||||
Reference in New Issue
Block a user