Fixes potential xss

This commit is contained in:
Shannon
2013-12-04 12:42:40 +11:00
parent d4514844f8
commit 1efa75c891
4 changed files with 31 additions and 15 deletions

View File

@@ -20,10 +20,7 @@ namespace Umbraco.Web
public static string GetCleanedItem(this HttpRequest request, string key)
{
var item = request.GetItemAsString(key);
//remove any html
item = item.StripHtml();
//strip out any potential chars involved with XSS
return item.ExceptChars(new HashSet<char>("(){}[];:%<>/\\|&'\"".ToCharArray()));
return item.CleanForXss();
}
/// <summary>