From: Thomas Tanghus <thomas@tanghus.net>
Date: Mon, 25 Jun 2012 03:03:30 +0000 (+0200)
Subject: XSS fix.
X-Git-Tag: v4.5.0beta1~74^2~403^2~27
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=5ac4830e757eb07ff2ca993954f2c31bbe80185f;p=nextcloud-server.git

XSS fix.
---

diff --git a/settings/templates/apps.php b/settings/templates/apps.php
index b9beedca151..6edaf6c5848 100644
--- a/settings/templates/apps.php
+++ b/settings/templates/apps.php
@@ -12,7 +12,7 @@
 <ul id="leftcontent">
 	<?php foreach($_['apps'] as $app):?>
 	<li <?php if($app['active']) echo 'class="active"'?> data-id="<?php echo $app['id'] ?>">
-		<a href="?appid=<?php echo $app['id'] ?>"><?php  echo $app['name'] ?></a>
+		<a href="?appid=<?php echo $app['id'] ?>"><?php  echo htmlentities($app['name']) ?></a>
 		<span class="hidden">
 			<?php OC_JSON::encodedPrint($app,false) ?>
 		</span>