diff options
author | Frank Karlitschek <frank@owncloud.org> | 2013-03-02 11:35:37 -0800 |
---|---|---|
committer | Frank Karlitschek <frank@owncloud.org> | 2013-03-02 11:35:37 -0800 |
commit | 927a374dbe5b2542a604e85b19dd24d5b39ce22e (patch) | |
tree | 3619ab3cb7dac1303ecc6bc5e2e8579e1adbbfbf | |
parent | c8cdc741fd8026d13f4f407b11d5b8eb4550fd2f (diff) | |
parent | 3e3c0392928fa9e8df7a9d70993f6dccb5847053 (diff) | |
download | nextcloud-server-927a374dbe5b2542a604e85b19dd24d5b39ce22e.tar.gz nextcloud-server-927a374dbe5b2542a604e85b19dd24d5b39ce22e.zip |
Merge pull request #2036 from owncloud/escape-only-in-template
Escape the data only in the template
-rwxr-xr-x | lib/util.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/lib/util.php b/lib/util.php index ce426684fea..de1f870fd7e 100755 --- a/lib/util.php +++ b/lib/util.php @@ -323,14 +323,14 @@ class OC_Util { $parameters[$value] = true; } if (!empty($_POST['user'])) { - $parameters["username"] = OC_Util::sanitizeHTML($_POST['user']).'"'; + $parameters["username"] = $_POST['user']; $parameters['user_autofocus'] = false; } else { $parameters["username"] = ''; $parameters['user_autofocus'] = true; } if (isset($_REQUEST['redirect_url'])) { - $redirect_url = OC_Util::sanitizeHTML($_REQUEST['redirect_url']); + $redirect_url = $_REQUEST['redirect_url']; $parameters['redirect_url'] = urlencode($redirect_url); } |