From 1409691735dc8fa0d6483a3d61471cd874745ad3 Mon Sep 17 00:00:00 2001
From: Stefan Giehl <stefan@matomo.org>
Date: Mon, 17 Oct 2022 01:22:13 +0200
Subject: Adds missing escaping (#19863)

---
 core/Plugin/Controller.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/core/Plugin/Controller.php b/core/Plugin/Controller.php
index d720fa473f..df3dd45447 100644
--- a/core/Plugin/Controller.php
+++ b/core/Plugin/Controller.php
@@ -862,7 +862,7 @@ abstract class Controller
                                                                                     $invalidHost,
                                                                                     '</a>',
                                                                                     "<br/><a href=\"$validUrl\">",
-                                                                                    $validHost,
+                                                                                    Common::sanitizeInputValue($validHost),
                                                                                     '</a>'
                                                                                ));
             } elseif (Piwik::isUserIsAnonymous()) {
-- 
cgit v1.2.3