diff --git a/modules/communication/communication.controller.php b/modules/communication/communication.controller.php index f77b3e05f..452c61afc 100644 --- a/modules/communication/communication.controller.php +++ b/modules/communication/communication.controller.php @@ -130,7 +130,7 @@ class communicationController extends communication $view_url = Context::getRequestUri(); $content = sprintf("%s

From : %s", $content, $view_url, $view_url); $oMail = new Mail(); - $oMail->setTitle($title); + $oMail->setTitle(htmlspecialchars($title, ENT_COMPAT | ENT_HTML401, 'UTF-8', false)); $oMail->setContent(utf8_mbencode(removeHackTag($content))); $oMail->setSender($logged_info->nick_name, $logged_info->email_address); $oMail->setReceiptor($receiver_member_info->nick_name, $receiver_member_info->email_address);