MDL-69911 core: Clean content passed through TeX filter

gjb2048 · Jan 12, 2021 · 11e13d1 · 11e13d1
1 parent ce87be7
commit 11e13d1
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/filter/tex/filter.php b/filter/tex/filter.php
@@ -189,6 +189,9 @@ function filter($text, array $options = array()) {
                 continue;
             }
 
+            // Sanitize the decoded string, because filter_text_image() injects the final string between script tags.
+            $texexp = clean_param($texexp, PARAM_TEXT);
+
             $md5 = md5($texexp);
             if (!$DB->record_exists("cache_filters", array("filter"=>"tex", "md5key"=>$md5))) {
                 $texcache = new stdClass();