From ddaec1c5ac2dc759a201feecbc91698e7bbeefba Mon Sep 17 00:00:00 2001 From: cigamit Date: Sat, 17 Mar 2018 08:04:30 -0500 Subject: [PATCH] Additional XSS protection related to #1457 --- lib/functions.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/functions.php b/lib/functions.php index 4cc51e573..c711dc843 100644 --- a/lib/functions.php +++ b/lib/functions.php @@ -3383,7 +3383,7 @@ function sanitize_search_string($string) { * @returns string - the sanitized uri */ function sanitize_uri($uri) { - static $drop_char_match = array('^', '$', '<', '>', '`', '\'', '"', '|', '+', '[', ']', '{', '}', ';', '!'); + static $drop_char_match = array('^', '$', '<', '>', '`', "'", '"', '|', '+', '[', ']', '{', '}', ';', '!', '(', ')'); static $drop_char_replace = array( '', '', '', '', '', '', '', '', '', '', '', '', '', '', ''); return str_replace($drop_char_match, $drop_char_replace, strip_tags(urldecode($uri)));