aboutsummaryrefslogtreecommitdiff
path: root/app/Controllers/categoryController.php
diff options
context:
space:
mode:
authorGravatar Alexandre Alapetite <alexandre@alapetite.fr> 2025-12-04 00:02:58 +0100
committerGravatar GitHub <noreply@github.com> 2025-12-04 00:02:58 +0100
commit1621f12a15855b3e1b98d58b6e8effe959926b46 (patch)
tree0e7f7c85f658140626f563824e02c831b13a5681 /app/Controllers/categoryController.php
parenta50e9a98dbf90839e4889d12e08bed11b2e22453 (diff)
Fix HTML encoding in preview filters (alternative) (#8259)
Alternative to https://github.com/FreshRSS/FreshRSS/pull/8222 Follow-up of https://github.com/FreshRSS/FreshRSS/pull/8222 Co-authored-by: Inverle <inverle@proton.me>
Diffstat (limited to 'app/Controllers/categoryController.php')
-rw-r--r--app/Controllers/categoryController.php4
1 files changed, 2 insertions, 2 deletions
diff --git a/app/Controllers/categoryController.php b/app/Controllers/categoryController.php
index 5b1dd9d17..fd148bf05 100644
--- a/app/Controllers/categoryController.php
+++ b/app/Controllers/categoryController.php
@@ -110,7 +110,7 @@ class FreshRSS_category_Controller extends FreshRSS_ActionController {
$category->_attribute('read_when_same_title_in_category', null);
}
- $category->_filtersAction('read', Minz_Request::paramTextToArray('filteractions_read'));
+ $category->_filtersAction('read', Minz_Request::paramTextToArray('filteractions_read')); // Keep as HTML
if (Minz_Request::paramBoolean('use_default_purge_options')) {
$category->_attribute('archiving', null);
@@ -177,7 +177,7 @@ class FreshRSS_category_Controller extends FreshRSS_ActionController {
Minz_Error::error(400);
return;
}
- $filteractions = Minz_Request::paramTextToArray('filteractions_read');
+ $filteractions = Minz_Request::paramTextToArray('filteractions_read', plaintext: true);
$filteractions = array_map(fn(string $action): string => trim($action), $filteractions);
$filteractions = array_filter($filteractions, fn(string $action): bool => $action !== '');
$search = "c:$id (";