Set isHtmlMessage for more exceptions. (#14024)

* Set isHtmlMessage for more exceptions.

* Escaping file names.

1 files changed, 4 insertions, 3 deletions

diff --git a/core/Filechecks.php b/core/Filechecks.php
index 9cf8d45199..9da1beac5f 100644
--- a/core/Filechecks.php
+++ b/core/Filechecks.php
@@ -132,9 +132,9 @@ class Filechecks
 						You can try to execute:<br />";
         } else {
             $message .= "For example, on a GNU/Linux server if your Apache httpd user is "
-                        . self::getUser()
+                        . Common::sanitizeInputValue(self::getUser())
                         . ", you can try to execute:<br />\n"
-                        . "<code>chown -R ". self::getUserAndGroup() ." " . $path . "</code><br />";
+                        . "<code>chown -R ". Common::sanitizeInputValue(self::getUserAndGroup()) ." " . Common::sanitizeInputValue($path) . "</code><br />";
         }
 
         $message .= self::getMakeWritableCommand($path);
@@ -179,8 +179,9 @@ class Filechecks
      */
     private static function getMakeWritableCommand($realpath)
     {
+        $realpath = Common::sanitizeInputValue($realpath);
         if (SettingsServer::isWindows()) {
-            return "<code>cacls $realpath /t /g " . self::getUser() . ":f</code><br />\n";
+            return "<code>cacls $realpath /t /g " . Common::sanitizeInputValue(self::getUser()) . ":f</code><br />\n";
         }
         return "<code>chmod -R 0755 $realpath</code><br />";
     }