1.3.2

aloframework · Nov 12, 2015 · 5ca2a1c · 5ca2a1c
1 parent 4eca53b
commit 5ca2a1c
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 3 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,7 @@
+# 1.3.2 #
+
+ENT_SUBSTITUTE added to Alo::unXss() 
+
 # 1.3.1 #
 
 Fixed a bug in getUniqid() which tried to use a nonexistent constant

diff --git a/docs/class-AloFramework.Common.Alo.html b/docs/class-AloFramework.Common.Alo.html
@@ -275,6 +275,9 @@ <h4>See</h4>
 					<div class="list">
 							https://secure.php.net/manual/en/function.hash.php<br>
 					</div>
+					<h4>Codecoverageignore</h4>
+					<div class="list">
+					</div>
 
 
 			</div>
@@ -744,7 +747,8 @@ <h4>Author</h4>
 					</div>
 					<h4>Since</h4>
 					<div class="list">
-							1.2<br>
+							<p>1.3.2 ENT_SUBSTITUTE added<br/>
+        1.2</p><br>
 					</div>
 
 

diff --git a/src/Alo.php b/src/Alo.php
@@ -381,15 +381,16 @@ static function isTraversable($input) {
          *
          * @return string|array|Traversable The escaped string. If an array or traversable was passed on, the input
          * withall its applicable values escaped.
-         * @since  1.2
+         * @since  1.3.2 ENT_SUBSTITUTE added<br/>
+         *         1.2
          */
         static function unXss($input) {
             if (self::isTraversable($input)) {
                 foreach ($input as &$i) {
                     $i = self::unXss($i);
                 }
             } elseif (is_scalar($input)) {
-                $input = htmlspecialchars($input, ENT_QUOTES | ENT_HTML5);
+                $input = htmlspecialchars($input, ENT_QUOTES | ENT_HTML5 | ENT_SUBSTITUTE);
             }
 
             return $input;