diff options
| author | Stefan Giehl <stefan@matomo.org> | 2021-04-08 19:13:27 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-04-08 19:13:27 +0300 |
| commit | f6d683a62cbe5fafd77890f25bc2cff4ea6b75b9 (patch) | |
| tree | 14fe784529ac6559910a729a71f34eb363791e61 /plugins/GeoIp2 | |
| parent | bdae345f0b677e556cc0b8ce3eab1de9e5c64510 (diff) | |
Escape URL in geolocation admin error message (#17436)
* Escape URL in geolocation admin error message
* Update GeoIP2AutoUpdater.php
Diffstat (limited to 'plugins/GeoIp2')
| -rw-r--r-- | plugins/GeoIp2/GeoIP2AutoUpdater.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/plugins/GeoIp2/GeoIP2AutoUpdater.php b/plugins/GeoIp2/GeoIP2AutoUpdater.php index 8e7013c887..90bc42ecc7 100644 --- a/plugins/GeoIp2/GeoIP2AutoUpdater.php +++ b/plugins/GeoIp2/GeoIP2AutoUpdater.php @@ -464,7 +464,7 @@ class GeoIP2AutoUpdater extends Task $host = $parsedUrl['host'] ?? ''; if (empty($schema) || empty($host) || !in_array(Common::mb_strtolower($schema), ['http', 'https'])) { - throw new Exception(Piwik::translate('GeoIp2_MalFormedUpdateUrl', '<i>'.$url.'</i>')); + throw new Exception(Piwik::translate('GeoIp2_MalFormedUpdateUrl', '<i>'.Common::sanitizeInputValue($url).'</i>')); } $validHosts = Config::getInstance()->General['geolocation_download_from_trusted_hosts']; |