diff options
| author | Roeland Jago Douma <rullzer@users.noreply.github.com> | 2020-03-09 11:03:32 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-03-09 11:03:32 +0300 |
| commit | 8df76b56fcc1e750b0be2c557f9762d6f2ba2866 (patch) | |
| tree | 540fa1237ef0c595090488cf8757940a0b933e5d | |
| parent | f8569fc038d5138c0a621521d783900fbf527929 (diff) | |
| parent | 985d2c94477a03c94cca1669d38b3213622a7039 (diff) | |
Merge pull request #19832 from nextcloud/backport/19815/stable16
[stable16] Prevent self-xss via invalid mysql user name on install screen
| -rw-r--r-- | core/templates/installation.php | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/core/templates/installation.php b/core/templates/installation.php index de9427a74d8..36f5f5bfc6d 100644 --- a/core/templates/installation.php +++ b/core/templates/installation.php @@ -15,10 +15,10 @@ script('core', [ <?php foreach($_['errors'] as $err): ?> <p> <?php if(is_array($err)):?> - <?php print_unescaped($err['error']); ?> - <span class='hint'><?php print_unescaped($err['hint']); ?></span> + <?php p($err['error']); ?> + <span class='hint'><?php p($err['hint']); ?></span> <?php else: ?> - <?php print_unescaped($err); ?> + <?php p($err); ?> <?php endif; ?> </p> <?php endforeach; ?> |