Skip to content

Commit

Permalink
FIX special caracter allowed issue on extrafield
Browse files Browse the repository at this point in the history
  • Loading branch information
atm-corentin committed Dec 30, 2024
1 parent 1e0479d commit 5c00b90
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion htdocs/core/lib/functions.lib.php
Original file line number Diff line number Diff line change
Expand Up @@ -10322,7 +10322,7 @@ function dol_eval($s, $returnvalue = 1, $hideerrors = 1, $onlysimplestring = '1'
// We must accept with 2: (($reloadedobj = new Task($db)) && ($reloadedobj->fetchNoCompute($object->id) > 0) && ($secondloadedobj = new Project($db)) && ($secondloadedobj->fetchNoCompute($reloadedobj->fk_project) > 0)) ? $secondloadedobj->ref : "Parent project not found"

// Check if there is dynamic call (first we check chars are all into use a whitelist chars)
$specialcharsallowed = '^$_+-.*>&|=!?():"\',/@';
$specialcharsallowed = '^$_+-.*><&|=!?():"\',/@';
if ($onlysimplestring == '2') {
$specialcharsallowed .= '[]';
}
Expand Down

0 comments on commit 5c00b90

Please sign in to comment.