Sanitize all data we return via json_encode() to guard against XSS and

other data leaks.

1 files changed, 3 insertions, 2 deletions

diff --git a/modules/organize/controllers/organize.php b/modules/organize/controllers/organize.php
index 43d41357..57709cb5 100644
--- a/modules/organize/controllers/organize.php
+++ b/modules/organize/controllers/organize.php
@@ -61,8 +61,9 @@ class Organize_Controller extends Controller {
     access::required("view", $item);
     access::required("edit", $item);
 
-    print json_encode(array("title" => $item->title,
-                            "description" => empty($item->description) ? "" : $item->description));
+    print json_encode(
+      array("title" => p::clean($item->title),
+            "description" => empty($item->description) ? "" : p::clean($item->description)));
   }
 
   function tree($item, $parent) {