From e1967bd603d16550380532ed1ea71db813c6b121 Mon Sep 17 00:00:00 2001 From: Bernd Bestel Date: Sun, 25 Sep 2022 22:39:06 +0200 Subject: [PATCH] Allow chevrons in HTML filter (fixes #2007) --- controllers/BaseController.php | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/controllers/BaseController.php b/controllers/BaseController.php index eacbcbba..284843ac 100644 --- a/controllers/BaseController.php +++ b/controllers/BaseController.php @@ -229,12 +229,12 @@ class BaseController if (!is_bool($value) && !is_array($value)) { $value = self::$htmlPurifierInstance->purify($value); - } - // Allow some special chars - if (!is_array($value)) - { + // Allow some special chars + // Maybe also possible through HTMLPurifier config (http://htmlpurifier.org/live/configdoc/plain.html) $value = str_replace('&', '&', $value); + $value = str_replace('>', '>', $value); + $value = str_replace('<', '<', $value); } }