Announcements: add remove_xss

chamilo · Aug 5, 2021 · 9b16ad4 · 9b16ad4
1 parent 094fef4
commit 9b16ad4
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/main/inc/lib/AnnouncementManager.php b/main/inc/lib/AnnouncementManager.php
@@ -482,12 +482,12 @@ public static function displayAnnouncement($id)
 
         // The user id is always the current one.
         $toUserId = api_get_user_id();
-        $content = self::parseContent(
+        $content = Security::remove_XSS(self::parseContent(
             $toUserId,
             $content,
             api_get_course_id(),
             api_get_session_id()
-        );
+        ));
 
         $html .= "<tr><td>$content</td></tr>";
         $html .= "<tr>";