Fixed an XSS vulnerability

davidyell · Oct 5, 2018 · 90fabe4 · 90fabe4
1 parent c9358fb
commit 90fabe4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/View/Helper/SeoHelper.php b/src/View/Helper/SeoHelper.php
@@ -63,7 +63,7 @@ public function pagination(string $controllerName): ?string
     public function canonical(): string
     {
         $url = parse_url($this->request->getUri()->getPath());
-        $url = Router::fullbaseUrl() . $url['path'];
+        $url = Router::fullbaseUrl() . preg_replace("/[^\w\d-\/]+/", "-", $url['path']);
 
         return "<link rel='canonical' href='$url'>";
     }