No need for other chars to be replaced

Impossible to output an XSS without < or > alone
2026-03-03 07:13:59 +01:00 · 2014-05-03 14:13:48 +01:00
parent 1a85a1ddc3
commit a470daf9f5
1 changed files with 2 additions and 2 deletions
--- a/lib/settings-common.php
+++ b/lib/settings-common.php
@@ -65,8 +65,8 @@ function xssClean($data,$type) {

 	// === html ===
 	if ($type == "html") {
-		$bad  = array("<",    ">",    "=",        "&",     "(",       ")",     "\"",     "'");
-		$good = array("&lt;", "&gt;", "&equals;", "&amp;", "&lpar;", "&rpar;", "&quot;", "&apos;");
+		$bad  = array("<",    ">");
+		$good = array("&lt;", "&gt;");
 	}

 	// === style ===