Merge pull request #1257 from virtualtam/security/composer-advisories

composer: enforce PHP security advisories

diff --git a/tpl/default/includes.html b/tpl/default/includes.html
index 0427e2243a37bc1dc0e2085ce6996772d8a682a9..6c30d1bf8a432052df87b14709249e62e786ef51 100644 (file)
--- a/tpl/default/includes.html
+++ b/tpl/default/includes.html
@@ -21,7 +21,7 @@
   <meta property="og:type" content="article" />
   <meta property="og:url" content="{$index_url}?{$link.shorturl}" />
   {$ogDescription=isset($link.description_src) ? $link.description_src : $link.description}
-  <meta property="og:description" content="{function="substr($ogDescription, 0, 300)"}" />
+  <meta property="og:description" content="{function="substr(strip_tags($ogDescription), 0, 300)"}" />
   {if="$link.thumbnail"}
     <meta property="og:image" content="{$index_url}{$link.thumbnail}" />
   {/if}

diff --git a/tpl/vintage/includes.html b/tpl/vintage/includes.html
index df093495572ba72888c023f4af1b01d26163b1f0..2efb6b1063b632a23aef1cf383d941b57916b550 100644 (file)
--- a/tpl/vintage/includes.html
+++ b/tpl/vintage/includes.html
@@ -18,7 +18,7 @@
   <meta property="og:type" content="article" />
   <meta property="og:url" content="{$index_url}?{$link.shorturl}" />
   {$ogDescription=isset($link.description_src) ? $link.description_src : $link.description}
-  <meta property="og:description" content="{function="mb_substr($ogDescription, 0, 300)"}" />
+  <meta property="og:description" content="{function="mb_substr(strip_tags($ogDescription), 0, 300)"}" />
   {if="$link.thumbnail"}
     <meta property="og:image" content="{$index_url}{$link.thumbnail}" />
   {/if}