[TikiWiki-commits] [Git][tikiwiki/tiki][24.x] [BP][FIX] issue in Tiki Forum

Elifeleti Mukisa Dan pushed to branch 24.x at Tiki Wiki CMS Groupware / Tiki


Commits:
8b910bfc by Elifeleti Mukisa Dan at 2026-02-04T17:38:42+00:00
[BP][FIX] issue in Tiki Forum
---
* fix issue in Tiki Forum

See merge request tikiwiki/tiki!9506

- - - - -


1 changed file:

- lib/smarty_tiki/block.self_link.php


Changes:

=====================================
lib/smarty_tiki/block.self_link.php
=====================================
@@ -137,7 +137,8 @@ function smarty_block_self_link($params, $content, $smarty, &$repeat = false)
                     );
                     unset($params['_onclick']); // Prevent addition to $link later
                 } else {
-                    $ret = 'href="' . $ret . '"';
+                                      // Escape href value to prevent XSS injection
+                    $ret = 'href="' . htmlspecialchars($ret, ENT_QUOTES, 'UTF-8') . '"';
                 }
             }
 



View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/8b910bfcdee263c1fe69010bd1cb707dbf01d265

-- 
View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/8b910bfcdee263c1fe69010bd1cb707dbf01d265
You're receiving this email because of your account on gitlab.com.

_______________________________________________
TikiWiki-cvs mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tikiwiki-cvs