TW21240103, cleaning new comments before database

brickfield · Feb 17, 2025 · 52ac96d · 52ac96d
1 parent d2b5f0f
commit 52ac96d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/classes/comment.php b/classes/comment.php
@@ -170,7 +170,7 @@ public function save() {
         global $DB, $USER;
 
         $this->timemodified = time();
-        $this->content = html_to_text($this->content, 5000, false);
+        $this->content = clean_param(html_to_text($this->content, 5000, false), PARAM_TEXT);
 
         if ($this->id > 0) {
             $DB->update_record('board_comments', $this);