diff options
| author | Lukas Reschke <lukas@owncloud.com> | 2014-08-27 17:01:51 +0200 |
|---|---|---|
| committer | Lukas Reschke <lukas@owncloud.com> | 2014-08-27 17:01:51 +0200 |
| commit | 9ab62ad5b787d44238c842f633fc950918aaa796 (patch) | |
| tree | c6f01d2b90f95ec798badfac4a7fa14cd39e59a7 /lib | |
| parent | cb0da1178b0872988582ee5fbf6b5b1cb5ea2527 (diff) | |
| download | nextcloud-server-9ab62ad5b787d44238c842f633fc950918aaa796.tar.gz nextcloud-server-9ab62ad5b787d44238c842f633fc950918aaa796.zip | |
Escape error messages
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/private/template.php | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/lib/private/template.php b/lib/private/template.php index eaa58b769d7..173345cc001 100644 --- a/lib/private/template.php +++ b/lib/private/template.php @@ -272,19 +272,19 @@ class OC_Template extends \OC\Template\Base { if (defined('DEBUG') and DEBUG) { $hint = $exception->getTraceAsString(); if (!empty($hint)) { - $hint = '<pre>'.$hint.'</pre>'; + $hint = '<pre>'.OC_Util::sanitizeHTML($hint).'</pre>'; } while (method_exists($exception, 'previous') && $exception = $exception->previous()) { $error_msg .= '<br/>Caused by:' . ' '; if ($exception->getCode()) { - $error_msg .= '['.$exception->getCode().'] '; + $error_msg .= '['.OC_Util::sanitizeHTML($exception->getCode()).'] '; } - $error_msg .= $exception->getMessage(); + $error_msg .= OC_Util::sanitizeHTML($exception->getMessage()); }; } else { $hint = ''; if ($exception instanceof \OC\HintException) { - $hint = $exception->getHint(); + $hint = OC_Util::sanitizeHTML($exception->getHint()); } } self::printErrorPage($error_msg, $hint); |