diff options
| author | ideaship <ideaship@users.noreply.github.com> | 2014-03-06 16:03:00 +0100 |
|---|---|---|
| committer | ideaship <ideaship@users.noreply.github.com> | 2014-03-06 16:03:00 +0100 |
| commit | e08dbf80dc1e9e571a4f827acca7715703955366 (patch) | |
| tree | 17022c474cc93240240a3a13ee3f6206d38e9e11 | |
| parent | 1785c0c9b9fcdc6e9a8e58f13f45e5b53364882a (diff) | |
| download | nextcloud-server-e08dbf80dc1e9e571a4f827acca7715703955366.tar.gz nextcloud-server-e08dbf80dc1e9e571a4f827acca7715703955366.zip | |
fix: use print_escaped for radio button "checked"
use of p() results in escaped HTML code: checked="checked"
where it should be: checked="checked"
| -rw-r--r-- | core/templates/installation.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/core/templates/installation.php b/core/templates/installation.php index e2d296a713f..709207e7977 100644 --- a/core/templates/installation.php +++ b/core/templates/installation.php @@ -95,7 +95,7 @@ <input type="hidden" id="dbtype" name="dbtype" value="<?php p($type) ?>" /> <?php else: ?> <input type="radio" name="dbtype" value="<?php p($type) ?>" id="<?php p($type) ?>" - <?php p($_['dbtype'] === $type ? 'checked="checked" ' : '') ?>/> + <?php print_unescaped($_['dbtype'] === $type ? 'checked="checked" ' : '') ?>/> <label class="<?php p($type) ?>" for="<?php p($type) ?>"><?php p($label) ?></label> <?php endif; ?> <?php endforeach; ?> |