fix potential xss woops

duckduckgo spelling fix
2025-07-08 23:10:13 -04:00 · 2025-07-08 23:08:12 -04:00
2 changed files with 2 additions and 2 deletions
--- a/scraper/ddg.php
+++ b/scraper/ddg.php
@ -718,7 +718,7 @@ class ddg{
 						->getTextContent(
 							$json["suggestion"]
 						),
-					"correction" => $json["recourseText"]
+					"correction" => html_entity_decode($json["recourseText"])
 				];
 			}
 		}
--- a/web.php
+++ b/web.php
@ -89,7 +89,7 @@ if($results["spelling"]["type"] != "no_correction"){
 			'&' .
 			$frontend->buildquery($get, true) .
 			'&spellcheck=no">' .
-			$results["spelling"]["correction"] .
+			htmlspecialchars($results["spelling"]["correction"]) .
 			'</a>?' .
 		'</div>';
 }
Author	SHA1	Message	Date
lolcat	430c0a2f0f	fix potential xss woops	2025-07-08 23:10:13 -04:00
lolcat	1a00bf8069	duckduckgo spelling fix	2025-07-08 23:08:12 -04:00