summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--apps/remoteStorage/auth.php4
1 files changed, 2 insertions, 2 deletions
diff --git a/apps/remoteStorage/auth.php b/apps/remoteStorage/auth.php
index 8cbd4aa20f1..99e2272d3ab 100644
--- a/apps/remoteStorage/auth.php
+++ b/apps/remoteStorage/auth.php
@@ -44,9 +44,9 @@ foreach($_GET as $k => $v) {
$userId=$v;
} else if($k=='redirect_uri'){
$appUrlParts=explode('/', $v);
- $appUrl = $appUrlParts[2];//bit dodgy i guess
+ $appUrl = htmlentities($appUrlParts[2]);//TODO: check if this is equal to client_id
} else if($k=='scope'){
- $categories=$v;
+ $categories=htmlentities($v);
}
}
$currUser = OCP\USER::getUser();