summaryrefslogtreecommitdiffstats
path: root/lib/private/user.php
diff options
context:
space:
mode:
authorMorris Jobke <hey@morrisjobke.de>2015-07-21 00:26:30 +0200
committerMorris Jobke <hey@morrisjobke.de>2015-07-21 00:26:30 +0200
commit5a5c59639bc24d2c4ed57fb8d0b7abda86f0b829 (patch)
tree8c581c35a91bdf59d265b2610de5c515def06c3d /lib/private/user.php
parentd20e2002a6de9d472d29fb190867970a6f6b3b22 (diff)
downloadnextcloud-server-5a5c59639bc24d2c4ed57fb8d0b7abda86f0b829.tar.gz
nextcloud-server-5a5c59639bc24d2c4ed57fb8d0b7abda86f0b829.zip
Escape ampersand in logout URL
* fixes #17757
Diffstat (limited to 'lib/private/user.php')
-rw-r--r--lib/private/user.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/private/user.php b/lib/private/user.php
index 1d8b89e273f..92807246144 100644
--- a/lib/private/user.php
+++ b/lib/private/user.php
@@ -405,7 +405,7 @@ class OC_User {
return $backend->getLogoutAttribute();
}
- return 'href="' . link_to('', 'index.php') . '?logout=true&requesttoken=' . urlencode(OC_Util::callRegister()) . '"';
+ return 'href="' . link_to('', 'index.php') . '?logout=true&amp;requesttoken=' . urlencode(OC_Util::callRegister()) . '"';
}
/**