search

AllenEllis / EverySingleMonth

Meme Generator for Every Single Month
https://everysinglemonth.org
MIT License
8 stars 6 forks source link

Filter HTML characters from user input #14

Open AllenEllis opened 4 years ago

AllenEllis commented 4 years ago

Users are starting to game the system and put rogue HTML characters into the search box.

This is probably a simple matter of running html_entities() on any user input before it is allowed to propogate further through the code.