diff options
| -rw-r--r-- | app/Controllers/entryController.php | 2 | ||||
| -rw-r--r-- | lib/Minz/Request.php | 9 |
2 files changed, 10 insertions, 1 deletions
diff --git a/app/Controllers/entryController.php b/app/Controllers/entryController.php index 9104cefc4..8cea74752 100644 --- a/app/Controllers/entryController.php +++ b/app/Controllers/entryController.php @@ -114,7 +114,7 @@ class FreshRSS_entry_Controller extends FreshRSS_ActionController { } } else { /** @var array<numeric-string> $idArray */ - $idArray = Minz_Request::paramArray('id'); + $idArray = Minz_Request::paramArrayString('id'); $idString = Minz_Request::paramString('id'); if (count($idArray) > 0) { $ids = $idArray; diff --git a/lib/Minz/Request.php b/lib/Minz/Request.php index 301bd5623..8121eb104 100644 --- a/lib/Minz/Request.php +++ b/lib/Minz/Request.php @@ -69,6 +69,15 @@ class Minz_Request { return $specialchars ? Minz_Helper::htmlspecialchars_utf8(self::$params[$key]) : self::$params[$key]; } + /** @return array<string> */ + public static function paramArrayString(string $key, bool $specialchars = false): array { + if (empty(self::$params[$key]) || !is_array(self::$params[$key])) { + return []; + } + $result = array_filter(self::$params[$key], 'is_string'); + return $specialchars ? Minz_Helper::htmlspecialchars_utf8($result) : $result; + } + public static function paramTernary(string $key): ?bool { if (isset(self::$params[$key])) { $p = self::$params[$key]; |