From 9c76e34e20094991f44fdb8948f13ad74d7edd41 Mon Sep 17 00:00:00 2001
From: ONEXIN <onexin@qq.com>
Date: Thu, 28 May 2020 17:39:02 +0800
Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E5=A4=8D=20=E5=86=8D=E6=AC=A1?=
 =?UTF-8?q?=E7=BC=96=E8=BE=91=E6=96=87=E7=AB=A0=EF=BC=8C=E8=A2=AB=E8=BD=AC?=
 =?UTF-8?q?=E5=8C=96HTML=E5=AE=9E=E4=BD=93=E4=B8=A2=E5=A4=B1BUG?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 upload/source/include/portalcp/portalcp_article.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/upload/source/include/portalcp/portalcp_article.php b/upload/source/include/portalcp/portalcp_article.php
index f66a86a74..33fba63de 100644
--- a/upload/source/include/portalcp/portalcp_article.php
+++ b/upload/source/include/portalcp/portalcp_article.php
@@ -522,6 +522,8 @@ if($op == 'delete') {
 			$article_content['content'] .= $nextpage.$value['content'];
 		}
 
+		$article_content['content'] = dhtmlspecialchars($article_content['content']);
+
 		$article['attach_image'] = $article['attach_file'] = '';
 		foreach(C::t('portal_attachment')->fetch_all_by_aid($aid) as $value) {
 			if($value['isimage']) {
-- 
Gitee