[API] Security hotfix for source, picked from postActive

7 years ago · cd3a9ec6a9
parent 983478aeec
commit cd3a9ec6a9
1 changed files with 2 additions and 0 deletions
--- a/actions/apistatusesupdate.php
+++ b/actions/apistatusesupdate.php
@ -166,6 +166,7 @@ class ApiStatusesUpdateAction extends ApiAuthAction
        parent::prepare($args);

        $this->status = $this->trimmed('status');
+        $this->source = $this->trimmed('source');
        $this->lat    = $this->trimmed('lat');
        $this->lon    = $this->trimmed('long');
        $matches = array();
@ -294,6 +295,7 @@ class ApiStatusesUpdateAction extends ApiAuthAction


            $content = html_entity_decode($status_shortened, ENT_NOQUOTES, 'UTF-8');
+            $source = html_entity_decode($this->source, ENT_NOQUOTES, 'UTF-8');

            $options = array('reply_to' => $reply_to);