diff options
| author | Joas Schilling <213943+nickvergessen@users.noreply.github.com> | 2023-04-25 08:51:54 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-04-25 08:51:54 +0200 |
| commit | af214b6c1389d5ba526e059ccbe35eeb06c887d6 (patch) | |
| tree | 1c1ff8779d0a1cc0be9333b5518ac7a11bc940bf /apps | |
| parent | e9aefb5251ff4a13affbda4a771d8522e01d25e4 (diff) | |
| parent | b1ec7ff51f2ca3278314beffce547b579a050559 (diff) | |
| download | nextcloud-server-af214b6c1389d5ba526e059ccbe35eeb06c887d6.tar.gz nextcloud-server-af214b6c1389d5ba526e059ccbe35eeb06c887d6.zip | |
Merge pull request #36378 from nextcloud/fix/improve-taint-analysis
Add missing taint analysis docblock comments, and improve escaping in…
Diffstat (limited to 'apps')
| -rw-r--r-- | apps/dashboard/lib/Controller/LayoutApiController.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/apps/dashboard/lib/Controller/LayoutApiController.php b/apps/dashboard/lib/Controller/LayoutApiController.php index 755470b7b07..8eb01be497e 100644 --- a/apps/dashboard/lib/Controller/LayoutApiController.php +++ b/apps/dashboard/lib/Controller/LayoutApiController.php @@ -31,7 +31,6 @@ use OCP\IConfig; use OCP\IRequest; class LayoutApiController extends OCSController { - /** @var IConfig */ private $config; /** @var string */ @@ -56,6 +55,7 @@ class LayoutApiController extends OCSController { * @return JSONResponse */ public function create(string $layout): JSONResponse { + $layout = htmlspecialchars($layout); $this->config->setUserValue($this->userId, 'dashboard', 'layout', $layout); return new JSONResponse(['layout' => $layout]); } |