File tree Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -70,9 +70,9 @@ public function createAction(NodeInterface $postNode = null, NodeTemplate $newCo
70
70
$ this ->throwStatus (400 , 'Your comment was NOT created - it was too short. ' );
71
71
}
72
72
73
- $ newComment ->setProperty ('text ' , filter_var ($ newComment ->getProperty ('text ' ), FILTER_SANITIZE_STRIPPED ));
74
- $ newComment ->setProperty ('author ' , filter_var ($ newComment ->getProperty ('author ' ), FILTER_SANITIZE_STRIPPED ));
75
- $ newComment ->setProperty ('emailAddress ' , filter_var ($ newComment ->getProperty ('emailAddress ' ), FILTER_SANITIZE_STRIPPED ));
73
+ $ newComment ->setProperty ('text ' , htmlspecialchars ($ newComment ->getProperty ('text ' )));
74
+ $ newComment ->setProperty ('author ' , htmlspecialchars ($ newComment ->getProperty ('author ' )));
75
+ $ newComment ->setProperty ('emailAddress ' , htmlspecialchars ($ newComment ->getProperty ('emailAddress ' )));
76
76
77
77
$ commentNode = $ postNode ->getNode ('comments ' )->createNodeFromTemplate ($ newComment , uniqid ('comment- ' , true ));
78
78
$ commentNode ->setProperty ('spam ' , false );
You can’t perform that action at this time.
0 commit comments