From ad1f9cda2ca07f1e5cf4874099c67823784dcaa2 Mon Sep 17 00:00:00 2001
From: Thomas Brouard <contact@brrd.fr>
Date: Mon, 21 Jul 2025 16:11:56 +0200
Subject: [PATCH] Strip tags in context inherited from $_GET

---
 lodel/scripts/context.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lodel/scripts/context.php b/lodel/scripts/context.php
index 600ba7de9..a6888dabf 100644
--- a/lodel/scripts/context.php
+++ b/lodel/scripts/context.php
@@ -228,7 +228,7 @@ static public function setRequest(array &$request=array(), $controller = false)
 						}
 
 						if ((strpos($value, '<?php') === false) && (strpos($value, '%3E?php') === false)) {
-							self::$_context[$k][] = $value;
+							self::$_context[$k][] = strip_tags($value);
 						}
 					}
 				}else {
@@ -240,7 +240,7 @@ static public function setRequest(array &$request=array(), $controller = false)
 
 
 					if ((strpos($v, '<?php') === false) && (strpos($v, '%3E?php') === false )) {
-						self::$_context[$k] = $v;
+						self::$_context[$k] = strip_tags($v);
 					}
 				}
 			}