Ticket #799: profile-html.diff

File profile-html.diff, 1.0 KB (added by Nicolas, 15 years ago)

Remove sanitize_html calls from profile creation. All tags are already escaped at this point, so they are harmless.

  • html/user/create_profile.php

     
    266266        ImageJPEG($images[0], IMAGE_PATH . $user->id . '.jpg');
    267267        ImageJPEG($images[1], IMAGE_PATH . $user->id . '_sm.jpg');
    268268    }
    269     $response1 = sanitize_html($response1);
    270     $response2 = sanitize_html($response2);
    271269    if ($profile) {
    272270        $query = " response1 = '".boinc_real_escape_string($response1)."',"
    273271            ." response2 = '".boinc_real_escape_string($response2)."',"

  • html/inc/profile.inc

     
    1818
    1919require_once("../inc/boinc_db.inc");
    2020require_once("../inc/util.inc");
    21 require_once("../inc/sanitize_html.inc");
    2221require_once("../inc/cache.inc");
    2322require_once("../inc/user.inc");
    2423require_once("../inc/translation.inc");