From 9540eda95c4581bf410b401189dfd808cd031048 Mon Sep 17 00:00:00 2001 From: Caleb Mazalevskis Date: Fri, 1 Dec 2023 16:27:36 +0800 Subject: [PATCH] Improve escaping. --- Changelog.md | 4 ++++ src/Web.php | 4 ++-- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/Changelog.md b/Changelog.md index abd2ae3..58306cc 100644 --- a/Changelog.md +++ b/Changelog.md @@ -79,3 +79,7 @@ __*Why "v3.0.0" instead of "v1.0.0?"*__ Prior to phpMussel v3, the "phpMussel Co ### 3.4.2 [2022.11.22; Maikuolan]: Maintenance release. + +### v3.5.0 + +[2023.12.01; Maikuolan]: Improved escaping. diff --git a/src/Web.php b/src/Web.php index 6e4765a..5f71e98 100644 --- a/src/Web.php +++ b/src/Web.php @@ -8,7 +8,7 @@ * License: GNU/GPLv2 * @see LICENSE.txt * - * This file: Upload handler (last modified: 2023.09.26). + * This file: Upload handler (last modified: 2023.12.01). */ namespace phpMussel\Web; @@ -403,7 +403,7 @@ public function scan() /** Generate email body. */ $EmailBody = sprintf( $this->Loader->L10N->getString('notifications_message'), - preg_replace(['~^([\da-z]+\:\d+\:)~i', '~\n~'], ['', "
\n"], strip_tags($this->Loader->HashReference)), + preg_replace(['~^([\da-z]+:\d+:)~i', '~\n~'], ['', "
\n"], strip_tags($this->Loader->HashReference)), $TemplateData['detected'], $this->Loader->timeFormat($this->Loader->Time, $this->Loader->Configuration['core']['time_format']) );