diff options
Diffstat (limited to 'settings/ajax/togglegroups.php')
| -rw-r--r-- | settings/ajax/togglegroups.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/settings/ajax/togglegroups.php b/settings/ajax/togglegroups.php index de941f99132..b7746fed8f1 100644 --- a/settings/ajax/togglegroups.php +++ b/settings/ajax/togglegroups.php @@ -5,7 +5,7 @@ OCP\JSON::callCheck(); $success = true; $username = $_POST["username"]; -$group = OC_Util::sanitizeHTML($_POST["group"]); +$group = $_POST["group"]; if(!OC_Group::inGroup(OC_User::getUser(), 'admin') && (!OC_SubAdmin::isUserAccessible(OC_User::getUser(), $username) || !OC_SubAdmin::isGroupAccessible(OC_User::getUser(), $group))) { $l = OC_L10N::get('core'); |