rss MDLSITE-1007 now running clean_param() over the user token

BenKelada · Oct 4, 2010 · 83b912e · 83b912e
1 parent b276cf9
commit 83b912e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rss/file.php b/rss/file.php
@@ -58,7 +58,7 @@
 }
 
 $contextid   = (int)$args[0];
-$token  = $args[1];
+$token  = clean_param($args[1], PARAM_ALPHANUM);
 $componentname = clean_param($args[2], PARAM_FILE);