removing control chars in messages

diff --git a/wcfsetup/install/files/lib/util/MessageUtil.class.php b/wcfsetup/install/files/lib/util/MessageUtil.class.php
index 0cceed34e33179ae1d01691561e720abc1189a9a..6c52f0eeb1f4b97525500923aebb323080ee8bba 100644 (file)
--- a/wcfsetup/install/files/lib/util/MessageUtil.class.php
+++ b/wcfsetup/install/files/lib/util/MessageUtil.class.php
@@ -35,6 +35,9 @@ class MessageUtil {
                // remove emoji (MySQL 5.1 does not support them)
                $text = preg_replace('~\xF0\x9F[\x80-\xBF][\x80-\xBF]~', '', $text);
                
+               // remove control characters
+               $text = preg_replace('~[\x00-\x08\x0B-\x1F\x7F]~', '', $text);
+               
                return $text;
        }