diff --git a/application/core/FHCAPI_Controller.php b/application/core/FHCAPI_Controller.php index e1323f80d..6697953bc 100644 --- a/application/core/FHCAPI_Controller.php +++ b/application/core/FHCAPI_Controller.php @@ -81,8 +81,11 @@ class FHCAPI_Controller extends Auth_Controller // For JSON Requests (as opposed to multipart/form-data) get the $_POST variable from the input stream instead if ($this->input->get_request_header('Content-Type', true) == 'application/json') - $_POST = json_decode($this->security->xss_clean($this->input->raw_input_stream), true); - elseif (isset($_POST['_jsondata'])) { + { + $_POST = json_decode($this->input->raw_input_stream, true); + } + elseif (isset($_POST['_jsondata'])) + { $_POST = array_merge($_POST, json_decode($_POST['_jsondata'], true)); unset($_POST['_jsondata']); }