private function _checkXSS($params, $response) { if (!empty($params['filterXSS'])) { $response['htmlbody'] = \GO\Base\Util\String::filterXSS($response['htmlbody']); } elseif (\GO\Base\Util\String::detectXSS($response['htmlbody'])) { $response['htmlbody'] = GO::t('xssMessageHidden', 'email'); $response['xssDetected'] = true; } else { $response['xssDetected'] = false; } return $response; }