40a7ed7b15
Continue to remove any ${variables} in this format
18 lines
304 B
PHP
18 lines
304 B
PHP
<?php
|
|
|
|
if (!class_exists('xml')) {
|
|
class xml {
|
|
|
|
/**
|
|
* Escapes xml special characters to html entities and sanitze switch special chars.
|
|
*/
|
|
static function sanitize($string) {
|
|
$string = preg_replace('/\$\{[^}]+\}/', '', $string);
|
|
return htmlspecialchars($string, ENT_XML1);
|
|
}
|
|
|
|
}
|
|
}
|
|
|
|
?>
|