friendica
/
friendica-addons
mirror of https://git.friendi.ca/friendica/friendica-addons.git
1
0
Fork 0
Code Issues Releases Wiki Activity

Remove the deprecated Strings::escapeTags, as we now rely on Smarty to catch HTML tags.

pull/1111/head
very-ape 2021-05-17 12:30:07 -07:00
parent 026767d07e
commit c6aa212ea4
1 changed files with 11 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
saml/saml.php
View File

@ -281,21 +281,19 @@ function saml_addon_admin(&$a, &$o)
function saml_addon_admin_post(&$a)
{
$safeset = function ($key) {
$val = (!empty($_POST[$key]) ? Strings::escapeTags(trim($_POST[$key])) : '');
$set = function ($key) {
$val = (!empty($_POST[$key]) ? trim($_POST[$key]) : '');
DI::config()->set('saml', $key, $val);
};
$safeset('idp_id');
$safeset('client_id');
$safeset('sso_url');
$safeset('slo_request_url');
$safeset('slo_response_url');
$safeset('sp_key');
$safeset('sp_cert');
$safeset('idp_cert');
// Not using safeset here since settings_statement is *meant* to include HTML tags.
DI::config()->set('saml', 'settings_statement', $_POST['settings_statement']);
$set('idp_id');
$set('client_id');
$set('sso_url');
$set('slo_request_url');
$set('slo_response_url');
$set('sp_key');
$set('sp_cert');
$set('idp_cert');
$set('settings_statement');
}
function saml_create_user($username, $email, $name)