From: Tom Needham <needham.thomas@gmail.com>
Date: Tue, 8 May 2012 19:41:31 +0000 (+0000)
Subject: Protect admin from evil log messages
X-Git-Tag: v4.0.0RC~101
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=9c4734637348eb82224fe15f17a16b07b858e498;p=nextcloud-server.git

Protect admin from evil log messages
---

diff --git a/lib/log.php b/lib/log.php
index 8bb2839be66..bccc46846ce 100644
--- a/lib/log.php
+++ b/lib/log.php
@@ -34,6 +34,6 @@ class OC_Log {
 			call_user_func(array(self::$class, 'init'));
 		}
 		$log_class=self::$class;
-		$log_class::write($app, $message, $level);
+		$log_class::write($app, htmlentities($message), $level);
 	}
 }