mirror of
https://github.com/NodeBB/NodeBB.git
synced 2026-02-08 07:40:05 +01:00
escape input tag
This commit is contained in:
@@ -3,11 +3,12 @@
|
||||
var tagsController = {},
|
||||
async = require('async'),
|
||||
nconf = require('nconf'),
|
||||
validator = require('validator'),
|
||||
meta = require('../meta'),
|
||||
topics = require('../topics');
|
||||
|
||||
tagsController.getTag = function(req, res, next) {
|
||||
var tag = req.params.tag;
|
||||
var tag = validator.escape(req.params.tag);
|
||||
var uid = req.user ? req.user.uid : 0;
|
||||
var end = (parseInt(meta.config.topicsPerList, 10) || 20) - 1;
|
||||
topics.getTagTids(tag, 0, end, function(err, tids) {
|
||||
|
||||
Reference in New Issue
Block a user