YunoHost-Apps/agendav_ynh
1
0
Fork 0
mirror of https://github.com/YunoHost-Apps/agendav_ynh.git synced 2024-09-03 20:36:12 +02:00
Code Issues Activity Actions

Merge pull request #11 from JocelynDelalande/patch-1

Browse source 
Sanitize `trim($year)` input to avoid poluting POST response
This commit is contained in:
Julien Malik 2015-01-17 20:28:18 +01:00
commit b0a734b820
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
sources/libs/icalcreator/iCalcreator.class.php
View file

@ -8635,7 +8635,7 @@ class iCalUtilityFunctions {
$parno = iCalUtilityFunctions::_existRem( $input['params'], 'VALUE', 'DATE-TIME', $hitval, $parno );
$input['value'] = iCalUtilityFunctions::_timestamp2date( $year, $parno );
}
elseif( 8 <= strlen( trim( $year ))) { // ex. 2006-08-03 10:12:18
elseif( is_string( $year ) && ( 8 <= strlen( trim( $year )))) { // ex. 2006-08-03 10:12:18
if( $localtime ) unset ( $month['VALUE'], $month['TZID'] );
$input['params'] = iCalUtilityFunctions::_setParams( $month, array( 'VALUE' => 'DATE-TIME' ));
if( isset( $input['params']['TZID'] )) {