viscous/invoiceninja
1
0
Fork 0
mirror of https://github.com/invoiceninja/invoiceninja.git synced 2026-03-03 02:57:01 +00:00
Code Issues Packages Projects Releases Wiki Activity

Updates for task request filters

Browse Source
This commit is contained in:
David Bomba
2026-01-13 11:36:11 +11:00
parent 4dc37b7a57
commit 1fabf6f023
2 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
app/Http/Requests/Task/StoreTaskRequest.php
View File

@@ -161,6 +161,10 @@ class StoreTaskRequest extends Request
}
if(isset($input['description']) && is_string($input['description'])) {
$input['description'] = str_ireplace(['</sc', 'file:/', 'iframe', '<embed', '&lt;embed', '&lt;object', '<object', '127.0.0.1', 'localhost', '<?xml encoding="UTF-8">', '/etc/'], "", $input['description']);
}
/* Ensure the project is related */
if (array_key_exists('project_id', $input) && isset($input['project_id'])) {
$project = Project::withTrashed()->where('id', $input['project_id'])->company()->first();

4
app/Http/Requests/Task/UpdateTaskRequest.php
View File

@@ -136,6 +136,10 @@ class UpdateTaskRequest extends Request
$input['status_id'] = $this->decodePrimaryKey($input['status_id']);
}
if(isset($input['description']) && is_string($input['description'])) {
$input['description'] = str_ireplace(['</sc', 'file:/', 'iframe', '<embed', '&lt;embed', '&lt;object', '<object', '127.0.0.1', 'localhost', '<?xml encoding="UTF-8">', '/etc/'], "", $input['description']);
}
if (isset($input['documents'])) {
unset($input['documents']);
}