Merge pull request #40 from forkcms/fix-xss-in-foms

Fix xss in SpoonForms.
forkcms · Jun 15, 2016 · 123d9fd · 123d9fd
2 parents 4c70df9 + 740c954
commit 123d9fd
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/spoon/form/form.php b/spoon/form/form.php
@@ -982,6 +982,8 @@ public function parse($template)
 	 */
 	public function setAction($action)
 	{
+		$action = str_replace('"', '&qout;', $action);
+
 		$this->action = (string) $action;
 	}