1 files changed, 5 insertions, 1 deletions
diff --git a/en/downloads/get/lib.php b/en/downloads/get/lib.php
index efa69e775..35bbe985c 100644
--- a/en/downloads/get/lib.php
+++ b/en/downloads/get/lib.php
@@ -76,7 +76,11 @@ function rewrite_city($name)
 */
 function get($s)
 {
-    return isset($_GET[$s]) ? trim($_GET[$s]) : null;
+    if (isset($_GET[$s])) {
+        return strip_tags(trim($_GET[$s]));
+    }
+
+    return null;
 }
 
 class NoProductFoundError extends Exception {}