Improve input checking of sites (#3243)

dnnsoftware · Nov 5, 2019 · 8151da2 · 8151da2
1 parent ee69192
commit 8151da2
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/DNN Platform/Library/Data/DataProvider.cs b/DNN Platform/Library/Data/DataProvider.cs
@@ -517,7 +517,7 @@ public virtual int CreatePortal(string portalname, string currency, DateTime Exp
         {
             return
                 CreatePortal(
-                                            portalname,
+                                            PortalSecurity.Instance.InputFilter(portalname, PortalSecurity.FilterFlag.NoMarkup),
                                             currency,
                                             ExpiryDate,
                                             HostFee,
@@ -536,7 +536,7 @@ public virtual int CreatePortal(string portalname, string currency, DateTime Exp
         {
             return
                 ExecuteScalar<int>("AddPortalInfo",
-                                            portalname,
+                                            PortalSecurity.Instance.InputFilter(portalname, PortalSecurity.FilterFlag.NoMarkup),
                                             currency,
                                             GetNull(ExpiryDate),
                                             HostFee,
@@ -653,14 +653,14 @@ public virtual void UpdatePortalInfo(int portalId, int portalGroupId, string por
                                              string processorPassword, string description, string keyWords,
                                              string backgroundFile, int siteLogHistory, int splashTabId, int homeTabId,
                                              int loginTabId,
-                                             int registerTabId, int userTabId, int searchTabId, int custom404TabId, int custom500TabId, 
+                                             int registerTabId, int userTabId, int searchTabId, int custom404TabId, int custom500TabId,
                                              int termsTabId, int privacyTabId, string defaultLanguage,
                                              string homeDirectory, int lastModifiedByUserID, string cultureCode)
         {
             ExecuteNonQuery("UpdatePortalInfo",
                                       portalId,
                                       portalGroupId,
-                                      portalName,
+                                      PortalSecurity.Instance.InputFilter(portalName, PortalSecurity.FilterFlag.NoMarkup),
                                       GetNull(logoFile),
                                       GetNull(footerText),
                                       GetNull(expiryDate),