summaryrefslogtreecommitdiffstats
path: root/lib
diff options
context:
space:
mode:
authorLukas Reschke <lukas@statuscode.ch>2013-03-06 13:05:22 +0100
committerLukas Reschke <lukas@statuscode.ch>2013-03-06 13:05:22 +0100
commitcfb10dc58c37a2bd9f4fda57b765de07a13b32b8 (patch)
treed49e09dd57c2951082b495c6f8e885aede87ce76 /lib
parent630ee644db6dde893847a64ba52fd826e9e7ca96 (diff)
downloadnextcloud-server-cfb10dc58c37a2bd9f4fda57b765de07a13b32b8.tar.gz
nextcloud-server-cfb10dc58c37a2bd9f4fda57b765de07a13b32b8.zip
Add warning about sanitization
Diffstat (limited to 'lib')
-rw-r--r--lib/template.php5
1 files changed, 3 insertions, 2 deletions
diff --git a/lib/template.php b/lib/template.php
index 398f9de0655..434c1e9e990 100644
--- a/lib/template.php
+++ b/lib/template.php
@@ -519,12 +519,13 @@ class OC_Template{
/**
* @brief Print a fatal error page and terminates the script
* @param string $error The error message to show
- * @param string $hint An option hint message
+ * @param string $hint An optional hint message
+ * Warning: All data passed to $hint needs to get sanitized using OC_Util::sanitizeHTML
*/
public static function printErrorPage( $error_msg, $hint = '' ) {
$content = new OC_Template( '', 'error', 'error' );
$errors = array(array('error' => $error_msg, 'hint' => $hint));
- $content->assign( 'errors', $errors, false );
+ $content->assign( 'errors', $errors );
$content->printPage();
die();
}