fix(web): json_encode for input enter in /user/msg

This commit fixes #79. Ref: https://huntr.dev/bounties/a2b63a25-385f-4f4e-b790-d910b90718f7/
UniversalOJ · Sep 9, 2021 · ebf541a · ebf541a · billchenchina · Sep 9, 2021
1 parent 9edd285
commit ebf541a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/web/app/controllers/user_msg.php b/web/app/controllers/user_msg.php
@@ -151,7 +151,7 @@ function deleteMsg($msgId) {
 	$.ajaxSetup({async:false});
 	refreshConversations();
 	<?php if (isset($_GET['enter'])): ?>
-	enterConversation("<?= $_GET['enter'] ?>");
+	enterConversation(<?= json_encode($_GET['enter']) ?>);
 	<?php endif ?>
 });
 </script>