From 32f99b1214fceea01e04b1ba10ca724573f67d61 Mon Sep 17 00:00:00 2001
From: timstoffel <mail@timstoffel.net>
Date: Mon, 17 Jun 2019 18:15:58 +0200
Subject: [PATCH] Fix reflective XSS

---
 inc/modules/searchbox/Site.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/inc/modules/searchbox/Site.php b/inc/modules/searchbox/Site.php
index c619238..7e1510d 100644
--- a/inc/modules/searchbox/Site.php
+++ b/inc/modules/searchbox/Site.php
@@ -34,6 +34,8 @@
         public function getSearch($phrase, $index = 1)
         {
             $phrase = urldecode($phrase);
+            $phrase = strip_tags ($phrase);
+            $phrase = htmlentities ($phrase);
             $searchTemplate = 'search.html';
             $phraseMinLength = 3;