diff options
| author | Joas Schilling <coding@schilljs.com> | 2020-03-06 14:39:13 +0100 |
|---|---|---|
| committer | Joas Schilling <coding@schilljs.com> | 2020-03-06 14:39:13 +0100 |
| commit | 585b09af3ab20878eb533c7df258f33c9e3d971e (patch) | |
| tree | 4d7b631cd1d6113244f57069d497da915979ed46 /core | |
| parent | ed81337461c8c7763eb07a489fc980491dc9c046 (diff) | |
| download | nextcloud-server-585b09af3ab20878eb533c7df258f33c9e3d971e.tar.gz nextcloud-server-585b09af3ab20878eb533c7df258f33c9e3d971e.zip | |
Prevent self-xss via invalid mysql user name on install screen
Signed-off-by: Joas Schilling <coding@schilljs.com>
Diffstat (limited to 'core')
| -rw-r--r-- | core/templates/installation.php | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/core/templates/installation.php b/core/templates/installation.php index c0afc311939..e4a232fc965 100644 --- a/core/templates/installation.php +++ b/core/templates/installation.php @@ -15,10 +15,10 @@ script('core', [ <?php foreach($_['errors'] as $err): ?> <p> <?php if(is_array($err)):?> - <?php print_unescaped($err['error']); ?> - <span class='hint'><?php print_unescaped($err['hint']); ?></span> + <?php p($err['error']); ?> + <span class='hint'><?php p($err['hint']); ?></span> <?php else: ?> - <?php print_unescaped($err); ?> + <?php p($err); ?> <?php endif; ?> </p> <?php endforeach; ?> |