Plugin Directory

Changeset 3258893


Ignore:
Timestamp:
03/20/2025 06:19:11 AM (13 months ago)
Author:
zohocrm
Message:

Security review changes has been updated

File:
1 edited

Legend:

Unmodified
Added
Removed
  • zoho-crm-forms/trunk/includes/crmwebformfieldsfuntions.php

    r3178280 r3258893  
    140140        if (isset($users_list['users'][0]['email']))
    141141            for ($i = 0; $i < count($users_list['users']); $i++) {
    142                 $htmlcontent_option .= "<option id='{$users_list['users'][$i]['email']}' value='{$users_list['users'][$i]['id']}'";
     142                $useremail = esc_html($users_list['users'][$i]['email']);
     143                $userid = esc_html($users_list['users'][$i]['id']);
     144                $htmlcontent_option .= "<option id='{$useremail}' value='{$userid}'";
    143145                if ($users_list['users'][$i]['id'] == $config_fields->assigned_to) {
    144146                    $htmlcontent_option .= " selected";
    145147                }
    146                 $htmlcontent_option .= ">{$users_list['users'][$i]['email']}</option>";
     148                $htmlcontent_option .= ">{$useremail}</option>";
    147149            }
    148150
Note: See TracChangeset for help on using the changeset viewer.