Skip to content
Snippets Groups Projects
Unverified Commit 585b09af authored by Joas Schilling's avatar Joas Schilling
Browse files

Prevent self-xss via invalid mysql user name on install screen 


Signed-off-by: default avatarJoas Schilling <coding@schilljs.com>
parent ed813374
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
core/templates/installation.php
+ 3
− 3
View file @ 585b09af
...@@ -15,10 +15,10 @@ script('core', [ ...@@ -15,10 +15,10 @@ script('core', [
<?php foreach($_['errors'] as $err): ?> <?php foreach($_['errors'] as $err): ?>
<p> <p>
<?php if(is_array($err)):?> <?php if(is_array($err)):?>
<?php print_unescaped($err['error']); ?> <?php p($err['error']); ?>
<span class='hint'><?php print_unescaped($err['hint']); ?></span> <span class='hint'><?php p($err['hint']); ?></span>
<?php else: ?> <?php else: ?>
<?php print_unescaped($err); ?> <?php p($err); ?>
<?php endif; ?> <?php endif; ?>
</p> </p>
<?php endforeach; ?> <?php endforeach; ?>
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment