do not Sanitize::clean() $this->request->data.
pull/63/head
Noud de Brouwer 2012-12-17 17:33:21 +00:00
parent 7def9f6afc
commit 8c7f8921a7
1 changed files with 2 additions and 2 deletions

View File

@ -507,11 +507,11 @@ class AttributesController extends AppController {
if (!CakeSession::read('Message.flash')) {
$this->Session->setFlash(__('The attribute could not be saved. Please, try again.'));
} else {
$this->request->data = Sanitize::clean($this->Attribute->read(null, $id));
$this->request->data = $this->Attribute->read(null, $id);
}
}
} else {
$this->request->data = Sanitize::clean($this->Attribute->read(null, $id));
$this->request->data = $this->Attribute->read(null, $id);
}
// needed for RBAC
$this->set('attribute', Sanitize::clean($this->request->data));