aboutsummaryrefslogtreecommitdiff
path: root/app/Controllers/subscriptionController.php
diff options
context:
space:
mode:
authorGravatar Alexandre Alapetite <alexandre@alapetite.fr> 2025-12-04 00:02:58 +0100
committerGravatar GitHub <noreply@github.com> 2025-12-04 00:02:58 +0100
commit1621f12a15855b3e1b98d58b6e8effe959926b46 (patch)
tree0e7f7c85f658140626f563824e02c831b13a5681 /app/Controllers/subscriptionController.php
parenta50e9a98dbf90839e4889d12e08bed11b2e22453 (diff)
Fix HTML encoding in preview filters (alternative) (#8259)
Alternative to https://github.com/FreshRSS/FreshRSS/pull/8222 Follow-up of https://github.com/FreshRSS/FreshRSS/pull/8222 Co-authored-by: Inverle <inverle@proton.me>
Diffstat (limited to 'app/Controllers/subscriptionController.php')
-rw-r--r--app/Controllers/subscriptionController.php4
1 files changed, 2 insertions, 2 deletions
diff --git a/app/Controllers/subscriptionController.php b/app/Controllers/subscriptionController.php
index a6928e32e..ad9b05787 100644
--- a/app/Controllers/subscriptionController.php
+++ b/app/Controllers/subscriptionController.php
@@ -247,7 +247,7 @@ class FreshRSS_subscription_Controller extends FreshRSS_ActionController {
]);
}
- $feed->_filtersAction('read', Minz_Request::paramTextToArray('filteractions_read'));
+ $feed->_filtersAction('read', Minz_Request::paramTextToArray('filteractions_read')); // Keep as HTML
$feed->_kind(Minz_Request::paramInt('feed_kind') ?: FreshRSS_Feed::KIND_RSS);
if ($feed->kind() === FreshRSS_Feed::KIND_HTML_XPATH || $feed->kind() === FreshRSS_Feed::KIND_XML_XPATH) {
@@ -415,7 +415,7 @@ class FreshRSS_subscription_Controller extends FreshRSS_ActionController {
Minz_Error::error(400);
return;
}
- $filteractions = Minz_Request::paramTextToArray('filteractions_read');
+ $filteractions = Minz_Request::paramTextToArray('filteractions_read', plaintext: true);
$filteractions = array_map(fn(string $action): string => trim($action), $filteractions);
$filteractions = array_filter($filteractions, fn(string $action): bool => $action !== '');
$search = "f:$id (";