修复特殊字符不能转义的bug

gopeak · Apr 27, 2020 · f1bf861 · f1bf861
1 parent 05f7c55
commit f1bf861
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/app/ctrl/issue/Main.php b/app/ctrl/issue/Main.php
@@ -1057,7 +1057,7 @@ public function add($params = [])
         }
 
         $info = [];
-        $info['summary'] = $params['summary'];
+        $info['summary'] = htmlspecialchars($params['summary']);
         $info['creator'] = $uid;
         $info['reporter'] = $uid;
         $info['created'] = time();
@@ -1409,6 +1409,11 @@ private function getAddFormInfo(&$params = [])
         return $info;
     }
 
+    /**
+     * @param array $params
+     * @return array
+     * @throws \Exception
+     */
     private function getUpdateFormInfo($params = [])
     {
         $info = [];

diff --git a/event_test.php b/event_test.php
@@ -1,4 +1,9 @@
 <?php
+
+echo " ?\"ddd\"><><>\n";
+echo htmlspecialchars(" ?\"ddd\"><><>");
+die;
+
 require './app/globals.php';
 
 use Symfony\Contracts\EventDispatcher\Event;