mirror of
https://github.com/Lastorder-DC/rhymix.git
synced 2026-01-04 01:01:41 +09:00
prevent xss
This commit is contained in:
parent
4e157c9ec0
commit
9026f9df8a
1 changed files with 11 additions and 3 deletions
|
|
@ -56,11 +56,19 @@ class documentView extends document
|
|||
*/
|
||||
function dispDocumentPreview()
|
||||
{
|
||||
Context::set('layout','none');
|
||||
|
||||
$content = Context::get('content');
|
||||
if(Context::getRequestMethod() == 'GET')
|
||||
{
|
||||
return new Object(-1, 'msg_invalid_request');
|
||||
}
|
||||
|
||||
if(Context::get('logged_info')->is_admin != 'Y')
|
||||
{
|
||||
Context::set('content', removeHackTag(Context::get('content')));
|
||||
}
|
||||
|
||||
$this->setTemplatePath($this->module_path.'tpl');
|
||||
$this->setTemplateFile('preview_page');
|
||||
Context::set('layout', 'none');
|
||||
}
|
||||
|
||||
/**
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue