From 3ceabcf18294eeeac294c289301649d7e69a923d Mon Sep 17 00:00:00 2001
From: songchenxuan <songchenxuan@easycorp.ltd>
Date: Mon, 5 Jun 2023 09:32:50 +0800
Subject: [PATCH] * Fix bug #28503.

---
 framework/api/entry.class.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/framework/api/entry.class.php b/framework/api/entry.class.php
index 0b3f15714b..cb421df268 100644
--- a/framework/api/entry.class.php
+++ b/framework/api/entry.class.php
@@ -417,6 +417,7 @@ class baseEntry
      */
     public function setPost($key, $value)
     {
+        if(in_array($key, array('desc', 'spec', 'verify', 'steps'))) $value = htmlspecialchars($value);
         $_POST[$key] = $value;
     }