| 
					
				 | 
			
			
				@@ -1052,7 +1052,7 @@ function tripal_pub_ajax_form_handler($delta=0 ) { 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				  
			 | 
		
	
		
			
				 | 
				 | 
			
			
				     $form_state = array('storage' => NULL, 'submitted' => FALSE); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				  
			 | 
		
	
		
			
				 | 
				 | 
			
			
				-    $form_build_id = $_POST['form_build_id']; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+    $form_build_id = filter_xss($_POST['form_build_id']); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				  
			 | 
		
	
		
			
				 | 
				 | 
			
			
				     // Get the form from the cache. 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				     $form = form_get_cache($form_build_id, $form_state); 
			 |