Line 194: Potential problem: drupal_set_message() only accepts filtered text, be sure to use check_plain(), filter_xss() or similar to ensure your $variable is fully sanitized. (Drupal Docs) [security_dsm]

drupal_set_message($message, 'status');

Line 241: Potential problem: drupal_set_message() only accepts filtered text, be sure to use check_plain(), filter_xss() or similar to ensure your $variable is fully sanitized. (Drupal Docs) [security_dsm]

drupal_set_message($message, 'status');

CommentFileSizeAuthor
#2 Potential_problem-2853135-2.patch866 bytesMunavijayalakshmi
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

Munavijayalakshmi created an issue. See original summary.

Munavijayalakshmi’s picture

Munavijayalakshmi CreditAttribution: Munavijayalakshmi at Valuebound commented
Status: Active » Needs review
FileSize
Potential_problem-2853135-2.patch866 bytes
dstol’s picture

dstol
Primary language English
CreditAttribution: dstol as a volunteer commented
Status: Needs review » Closed (works as designed)

If you take a look at the comments prior to the drupal_set_message() call you'll see that $message is already sanitized.