瀏覽代碼

Update HomeSettings Controller, allow html in bio

Daniel Supernault 6 年之前
父節點
當前提交
f69248ba06
共有 1 個文件被更改,包括 3 次插入2 次删除
  1. 3 2
      app/Http/Controllers/Settings/HomeSettings.php

+ 3 - 2
app/Http/Controllers/Settings/HomeSettings.php

@@ -11,6 +11,7 @@ use App\UserFilter;
 use App\Util\Lexer\PrettyNumber;
 use Auth;
 use DB;
+use Purify;
 use Illuminate\Http\Request;
 
 trait HomeSettings
@@ -40,8 +41,8 @@ trait HomeSettings
       ]);
 
         $changes = false;
-        $name = $request->input('name');
-        $bio = $request->input('bio');
+        $name = strip_tags($request->input('name'));
+        $bio = Purify::clean($request->input('bio'));
         $website = $request->input('website');
         $email = $request->input('email');
         $user = Auth::user();