diff options
| author | Roeland Jago Douma <rullzer@users.noreply.github.com> | 2020-03-07 14:19:55 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-03-07 14:19:55 +0100 |
| commit | 1d5058b48407af0197d9b6e169216a9c723e00e6 (patch) | |
| tree | 1f05d5ead17e673ea122c4cb3e466d7fe8c1638b /core | |
| parent | c9949d119b7e76088515d3bdd1318036e85322e1 (diff) | |
| parent | 585b09af3ab20878eb533c7df258f33c9e3d971e (diff) | |
| download | nextcloud-server-1d5058b48407af0197d9b6e169216a9c723e00e6.tar.gz nextcloud-server-1d5058b48407af0197d9b6e169216a9c723e00e6.zip | |
Merge pull request #19815 from nextcloud/bugfix/noid/prevent-self-xss-via-invalid-mysql-username
Prevent self-xss via invalid mysql user name on install screen
Diffstat (limited to 'core')
| -rw-r--r-- | core/templates/installation.php | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/core/templates/installation.php b/core/templates/installation.php index c0afc311939..e4a232fc965 100644 --- a/core/templates/installation.php +++ b/core/templates/installation.php @@ -15,10 +15,10 @@ script('core', [ <?php foreach($_['errors'] as $err): ?> <p> <?php if(is_array($err)):?> - <?php print_unescaped($err['error']); ?> - <span class='hint'><?php print_unescaped($err['hint']); ?></span> + <?php p($err['error']); ?> + <span class='hint'><?php p($err['hint']); ?></span> <?php else: ?> - <?php print_unescaped($err); ?> + <?php p($err); ?> <?php endif; ?> </p> <?php endforeach; ?> |