From 3a2016119498e31a0a87133323531f15851608c8 Mon Sep 17 00:00:00 2001 From: HB9HIL Date: Tue, 13 Aug 2024 22:04:25 +0200 Subject: [PATCH] xss_cleaning and uppercase callsign --- application/controllers/Widgets.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/application/controllers/Widgets.php b/application/controllers/Widgets.php index c8afd5a09..89d5375d7 100644 --- a/application/controllers/Widgets.php +++ b/application/controllers/Widgets.php @@ -69,7 +69,7 @@ class Widgets extends CI_Controller { $data['theme'] = $this->config->item('option_theme'); } - $data['user_callsign'] = $user_callsign; + $data['user_callsign'] = strtoupper($this->security->xss_clean($user_callsign)); $this->load->view('widgets/oqrs', $data); } } \ No newline at end of file