Skip to content

Ticket: Sanitize project name and description on output - #9230

Merged
AngelFQC merged 1 commit into
chamilo:1.11.xfrom
AngelFQC:fix/ticket-project-name-xss
Oct 15, 2026
Merged

AngelFQC merged 1 commit into
chamilo:1.11.xfrom
AngelFQC:fix/ticket-project-name-xss

Conversation

@AngelFQC

Copy link
Copy Markdown
Member

Apply Security::remove_XSS() to the project name and description when building the project lists in TicketManager::getProjects() and getProjectsSimple().

Refs GHSA-wj7h-p8jp-jqxw, GHSA-f38c-vpf7-4xfq

🤖 Generated with Claude Code

…ored XSS - refs GHSA-wj7h-p8jp-jqxw, GHSA-f38c-vpf7-4xfq

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
@AngelFQC
AngelFQC merged commit 6dfa0f4 into chamilo:1.11.x Oct 15, 2026
2 of 4 checks passed
@AngelFQC
AngelFQC deleted the fix/ticket-project-name-xss branch October 15, 2026 01:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant