Last security check

2026-09-12 10:25:49 +02:00
parent 987bcf5684
commit 245d09e62c
7 changed files with 16 additions and 15 deletions
@@ -693,7 +693,7 @@ async function aiSuggestRoadmapMeta(btn) {
            headers: {'Content-Type': 'application/json'},
            body: JSON.stringify({ 
                content: firstContent, 
-                session_title: '<?= htmlspecialchars(addslashes($session['title'])) ?>' 
+                session_title: <?= json_encode($session['title']) ?> 
            })
        });
        const data = await res.json();
@@ -741,7 +741,7 @@ async function openAiBreakdownModal(cardId, content) {
    currentBreakdownItems = [];

    document.getElementById('breakdownIdeaText').innerText = `"${content}"`;
-    document.getElementById('breakdownSessionLabel').innerText = `Sessie: <?= htmlspecialchars(addslashes($session['title'])) ?> (<?= htmlspecialchars(addslashes($session['theme'])) ?>)`;
+    document.getElementById('breakdownSessionLabel').innerText = "Sessie: " + <?= json_encode($session['title']) ?> + " (" + <?= json_encode($session['theme']) ?> + ")";
    
    const modal = document.getElementById('aiBreakdownModal');
    modal.classList.remove('hidden');
@@ -795,8 +795,8 @@ async function fetchAiBreakdown(content) {
            body: JSON.stringify({
                session_id: sessionId,
                content: content,
-                session_title: '<?= htmlspecialchars(addslashes($session['title'])) ?>',
-                theme: '<?= htmlspecialchars(addslashes($session['theme'])) ?>',
+                session_title: <?= json_encode($session['title']) ?>,
+                theme: <?= json_encode($session['theme']) ?>,
            })
        });