From cfd0140e2faa250e6e90cbeb4ec2ca4dcceed2f4 Mon Sep 17 00:00:00 2001
From: Robin Appelman <icewind@owncloud.com>
Date: Mon, 16 Apr 2012 12:59:08 +0200
Subject: fix 2 potential xss problems

---
 core/templates/404.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'core/templates/404.php')

diff --git a/core/templates/404.php b/core/templates/404.php
index 13a81010343..cd4f2b40bb2 100644
--- a/core/templates/404.php
+++ b/core/templates/404.php
@@ -10,6 +10,6 @@ if(!isset($_)){//also provide standalone error page
 <ul>
 	<li class='error'>
 		<?php echo $l->t( 'Cloud not found' ); ?><br/>
-		<p class='hint'><?php if(isset($_['file'])) echo $_['file']?></p>
+		<p class='hint'><?php if(isset($_['file'])) echo htmlentities($_['file'])?></p>
 	</li>
 </ul>
-- 
cgit v1.2.3