Protect admin from evil log messages

diff --git a/lib/log.php b/lib/log.php
index 8bb2839be66a36686539348fbfb913bbd16c361e..bccc46846cea07e9407725929d6577689b91225c 100644 (file)
--- a/lib/log.php
+++ b/lib/log.php
@@ -34,6 +34,6 @@ class OC_Log {
                        call_user_func(array(self::$class, 'init'));
                }
                $log_class=self::$class;
-               $log_class::write($app, $message, $level);
+               $log_class::write($app, htmlentities($message), $level);
        }
 }