[Noalyss-commit] [noalyss] 60/238: Security fix : f_id is a number

[Dany De Bontridder]

sparkyx pushed a commit to annotated tag rel7110
in repository noalyss.

commit 169fb9cf51dbc25ef44a27a2966735bd55eca152
Author: Dany De Bontridder <address@hidden>
Date:   Sat Jun 2 08:33:03 2018 +0200

    Security fix : f_id is a number
---
 include/lib/html_input.class.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/include/lib/html_input.class.php b/include/lib/html_input.class.php
index 0892966..d1f88f9 100755
--- a/include/lib/html_input.class.php
+++ b/include/lib/html_input.class.php
@@ -827,6 +827,7 @@ class HtmlInput
     static function title_box($p_name, $p_div, $p_mod="close", $p_js="",
             $p_draggable="n")
     {
+        $p_div=strip_tags($p_div);
         $r='<div class="bxbutton">';
 
         // If draggable : display a icon to unpin and move the dialog box