mirror of
https://git.tt-rss.org/git/tt-rss.git
synced 2025-12-13 13:35:56 +00:00
clean_filename: also remove markup
This commit is contained in:
@@ -593,7 +593,7 @@
|
||||
}
|
||||
|
||||
function clean_filename($filename) {
|
||||
return basename(preg_replace("/\.\.|[\/\\\]/", "", $filename));
|
||||
return basename(preg_replace("/\.\.|[\/\\\]/", "", clean($filename)));
|
||||
}
|
||||
|
||||
function make_password($length = 12) {
|
||||
|
||||
Reference in New Issue
Block a user