From 09b2597efe16fa7dd05169e307b8309e219ff614 Mon Sep 17 00:00:00 2001
From: Krivchikov Dmitry <KrivchikovDA@gmail.com>
Date: Wed, 25 Nov 2015 23:31:47 +0300
Subject: [PATCH] =?UTF-8?q?ADD=20=D0=B2=D1=8B=D1=80=D0=B5=D0=B7=D0=B0?=
 =?UTF-8?q?=D0=BD=D0=B8=D0=B5=20=D1=82=D0=B5=D0=B3=D0=BE=D0=B2=20=D0=B8?=
 =?UTF-8?q?=D0=B7=20=D0=B4=D0=BE=D0=BF.=20=D0=BF=D0=B0=D1=80=D0=B0=D0=BC?=
 =?UTF-8?q?=D0=B5=D1=82=D1=80=D0=BE=D0=B2?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 ground/controllers/JsonController.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ground/controllers/JsonController.php b/ground/controllers/JsonController.php
index 348446b..9b3cfa9 100644
--- a/ground/controllers/JsonController.php
+++ b/ground/controllers/JsonController.php
@@ -207,8 +207,8 @@ class JsonController extends Controller
 					if ($paramName && $paramValue) {
 						ExtraParams::model()->add(array(
 							'pointId' => $point->id,
-							'name' => $paramName,
-							'value' => $paramValue,
+							'name' => strip_tags($paramName),
+							'value' => strip_tags($paramValue),
 						));
 					}
 				}