← All changes | src/Controller/BaseControllerTrait.php +3 -3 2.3.15 → 2.3.4 View file →

		@@ -15,9 +15,9 @@
15	15	protected ?string $template = null;
16	16
17	17	public function getRequestUrl(): string
18	18	{
19		- return htmlentities($_SERVER['REQUEST_URI'], ENT_NOQUOTES);
	19	+ return htmlentities($_SERVER['REQUEST_URI']);
20	20	}
21	21
22	22	private function sanitizeValue(mixed $value): mixed
23	23	{
		@@ -32,11 +32,11 @@
32	32	}
33	33
34	34	$value = $newValue;
35	35	} elseif (is_string($value) === true) {
36		- $value = preg_replace('/\\+(["|\'])/', '$1', $value);
	36	+ $value = preg_replace('/[\\\\]+(["|\'])/', '$1', $value);
37	37	$value = stripslashes($value);
38		- $value = htmlspecialchars($value, ENT_NOQUOTES);
	38	+ $value = htmlspecialchars($value);
39	39	}
40	40
41	41	return $value;
42	42	}