summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorThomas Tanghus <thomas@tanghus.net>2012-06-08 20:38:06 +0200
committerThomas Tanghus <thomas@tanghus.net>2012-06-08 20:43:42 +0200
commit5eb5d23ac1e3de0b1d0fbc96087b3a616c943cc7 (patch)
tree739a92382e5b3935bc77a2e9c5cae6a77f1e4596
parenteb192ff4f3b201c9560543ae5f845a6391ffc834 (diff)
downloadnextcloud-server-5eb5d23ac1e3de0b1d0fbc96087b3a616c943cc7.tar.gz
nextcloud-server-5eb5d23ac1e3de0b1d0fbc96087b3a616c943cc7.zip
Contacts: Closed stupid XSS hole. Thanks AnybodyElse ;-)
Conflicts: apps/contacts/ajax/uploadphoto.php
-rw-r--r--apps/contacts/ajax/uploadphoto.php1
1 files changed, 1 insertions, 0 deletions
diff --git a/apps/contacts/ajax/uploadphoto.php b/apps/contacts/ajax/uploadphoto.php
index dca8ede6d60..49c03dc44ce 100644
--- a/apps/contacts/ajax/uploadphoto.php
+++ b/apps/contacts/ajax/uploadphoto.php
@@ -65,6 +65,7 @@ if ($fn) {
}
} else {
bailOut('Couldn\'t load temporary image: '.$file['tmp_name']);
+ bailOut(OC_Contacts_App::$l10n->t('Couldn\'t load temporary image: ').$tmpkey);
}
}