fixed Stored Cross Site Scripting (Authenticated) via Unvalidated Input

app/Http/Controllers/Settings/PersonalizationController.php

@@ -31,6 +31,10 @@ public function index()
      */
     public function getContactFieldTypes()
     {
+        foreach(auth()->user()->account->contactFieldTypes->morphMap as$A=>$B)
+        {
+                auth()->user()->account->contactFieldTypes->morphMap[$A]=preg_replace('/javascript:/','',$B);
+        }
         return auth()->user()->account->contactFieldTypes;
     }