ChurchCRM / CRM

ChurchCRM is an OpenSource Church CRM & Management Software.
https://ChurchCRM.io
MIT License
607 stars 428 forks source link

Sanitize family registration form data #7063

Closed respencer closed 2 weeks ago

respencer commented 1 month ago

Description & Issue number it closes

Strip tags and encode HTML characters in form data, preventing XSS.

Resolves #7029

Screenshots (if appropriate)

None. ## How to test the changes? Manually testing using docker image. ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Breaking change (fix or feature that would cause existing functionality to not work as expected) - [ ] This change requires a documentation update # How Has This Been Tested?

Manually testing using docker image.

Checklist: