From 5258bb0f58afbb1e18e09816f7f4a70eec8541ff Mon Sep 17 00:00:00 2001
From: Conrad Vermeulen <conrad@knowledgetree.com>
Date: Fri, 13 Jul 2007 14:45:28 +0000
Subject: [PATCH] KTS-2178 "cross site scripting" Implemented.

---
 thirdparty/Smarty/plugins/modifier.sanitize_input.php | 13 +++++++++++++
 1 file changed, 13 insertions(+), 0 deletions(-)
 create mode 100644 thirdparty/Smarty/plugins/modifier.sanitize_input.php

diff --git a/thirdparty/Smarty/plugins/modifier.sanitize_input.php b/thirdparty/Smarty/plugins/modifier.sanitize_input.php
new file mode 100644
index 0000000..5623e84
--- /dev/null
+++ b/thirdparty/Smarty/plugins/modifier.sanitize_input.php
@@ -0,0 +1,13 @@
+<?php
+
+function smarty_modifier_sanitize_input($string, $esc_type = 'html', $charset='UTF-8')
+{
+    $string = mb_ereg_replace("'","&#039;", $string);
+    $string = mb_ereg_replace('"',"&quot;", $string);
+    $string = mb_ereg_replace('<',"&lt;", $string);
+    $string = mb_ereg_replace('>',"&gt;", $string);
+    return $string;
+}
+
+
+?>
--
libgit2 0.21.4