Merge pull request #5178 from bolt/fix/escape-useragent

Strip tags from useragent.
bolt · Apr 14, 2016 · 0814141 · 0814141
2 parents 10bb9fe + cc2a300
commit 0814141
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/Storage/Entity/Authtoken.php b/src/Storage/Entity/Authtoken.php
@@ -134,7 +134,7 @@ public function getUseragent()
      */
     public function setUseragent($useragent)
     {
-        $this->useragent = substr($useragent, 0, 128);
+        $this->useragent = substr(strip_tags($useragent), 0, 128);
     }
 
     /**