moodle/moodle
3
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-08-06 01:16:44 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

MDL-69911 core: Clean content passed through TeX filter

Browse source
This commit is contained in:
Michael Hawkins 2020-12-01 18:59:03 +08:00 • committed by Jenkins
parent 8da4872464
commit da051fa484
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
filter/tex/filter.php
View file

@ -189,6 +189,9 @@ class filter_tex extends moodle_text_filter {
continue;
}
// Sanitize the decoded string, because filter_text_image() injects the final string between script tags.
$texexp = clean_param($texexp, PARAM_TEXT);
$md5 = md5($texexp);
if (!$DB->record_exists("cache_filters", array("filter"=>"tex", "md5key"=>$md5))) {
$texcache = new stdClass();