mirror of
https://github.com/processone/ejabberd.git
synced 2024-11-20 16:15:59 +01:00
Escape user input in mod_privacy_odbc (EJAB-1442)
This commit is contained in:
parent
9b145385af
commit
3952888f94
@ -751,9 +751,9 @@ item_to_raw(#listitem{type = Type,
|
||||
none ->
|
||||
{"n", ""};
|
||||
jid ->
|
||||
{"j", jlib:jid_to_string(Value)};
|
||||
{"j", ejabberd_odbc:escape(jlib:jid_to_string(Value))};
|
||||
group ->
|
||||
{"g", Value};
|
||||
{"g", ejabberd_odbc:escape(Value)};
|
||||
subscription ->
|
||||
case Value of
|
||||
none ->
|
||||
|
Loading…
Reference in New Issue
Block a user