#2083 - Sanitize data from module.info files.

1 files changed, 4 insertions, 0 deletions

diff --git a/modules/gallery/helpers/module.php b/modules/gallery/helpers/module.php
index 1b6c8d1a..0e190e46 100644
--- a/modules/gallery/helpers/module.php
+++ b/modules/gallery/helpers/module.php
@@ -93,6 +93,10 @@ class module_Core {
         $module_name = basename(dirname($file));
         $modules->$module_name =
           new ArrayObject(parse_ini_file($file), ArrayObject::ARRAY_AS_PROPS);
+        foreach ($modules->$module_name as &$value) {
+          $value = html::purify($value);
+        }
+
         $m =& $modules->$module_name;
         $m->installed = module::is_installed($module_name);
         $m->active = module::is_active($module_name);