From 58d9b91dd36c6e283cb206f687e20c8b8692d617 Mon Sep 17 00:00:00 2001 From: Maiyannah Bishop Date: Thu, 1 Sep 2016 17:11:02 -0400 Subject: [PATCH] [API] Security hotfix for source, picked from postActive --- actions/apistatusesupdate.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/actions/apistatusesupdate.php b/actions/apistatusesupdate.php index de00325494..7271f8be63 100644 --- a/actions/apistatusesupdate.php +++ b/actions/apistatusesupdate.php @@ -166,6 +166,7 @@ class ApiStatusesUpdateAction extends ApiAuthAction parent::prepare($args); $this->status = $this->trimmed('status'); + $this->source = $this->trimmed('source'); $this->lat = $this->trimmed('lat'); $this->lon = $this->trimmed('long'); $matches = array(); @@ -294,6 +295,7 @@ class ApiStatusesUpdateAction extends ApiAuthAction $content = html_entity_decode($status_shortened, ENT_NOQUOTES, 'UTF-8'); + $source = html_entity_decode($this->source, ENT_NOQUOTES, 'UTF-8'); $options = array('reply_to' => $reply_to);