summaryrefslogtreecommitdiffstats
path: root/lib/private/user.php
diff options
context:
space:
mode:
authorLukas Reschke <lukas@owncloud.com>2015-02-13 11:35:12 +0100
committerLukas Reschke <lukas@owncloud.com>2015-02-13 12:08:23 +0100
commit025110821f41ba55ec9deb2479ff7eb6b3e8b5c1 (patch)
tree7be906cf4d0a4b3fc88f03c37b9b97cd15ebc84e /lib/private/user.php
parentdfcd4acd5aebfa3476c58c652bbf5545d3882217 (diff)
downloadnextcloud-server-025110821f41ba55ec9deb2479ff7eb6b3e8b5c1.tar.gz
nextcloud-server-025110821f41ba55ec9deb2479ff7eb6b3e8b5c1.zip
URLEncode logout attribute
Otherwise logout can fail if the requesttoken contains a +
Diffstat (limited to 'lib/private/user.php')
-rw-r--r--lib/private/user.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/private/user.php b/lib/private/user.php
index d1fedffcaaf..10457c224f2 100644
--- a/lib/private/user.php
+++ b/lib/private/user.php
@@ -366,7 +366,7 @@ class OC_User {
return $backend->getLogoutAttribute();
}
- return 'href="' . link_to('', 'index.php') . '?logout=true&requesttoken=' . OC_Util::callRegister() . '"';
+ return 'href="' . link_to('', 'index.php') . '?logout=true&requesttoken=' . urlencode(OC_Util::callRegister()) . '"';
}
/**