diff options
| author | Joas Schilling <coding@schilljs.com> | 2020-03-06 16:39:13 +0300 |
|---|---|---|
| committer | backportbot[bot] <backportbot[bot]@users.noreply.github.com> | 2020-03-07 16:21:09 +0300 |
| commit | d056f7e110eff49fae62f6a8573589b79e228bf9 (patch) | |
| tree | 0ad57474a07cb4d4b5a3c1dae52b68d3ae600752 /core/templates | |
| parent | 54b6484f708246ba1e0294bdbcd9520601fd52ff (diff) | |
Prevent self-xss via invalid mysql user name on install screen
Signed-off-by: Joas Schilling <coding@schilljs.com>
Diffstat (limited to 'core/templates')
| -rw-r--r-- | core/templates/installation.php | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/core/templates/installation.php b/core/templates/installation.php index c0afc311939..e4a232fc965 100644 --- a/core/templates/installation.php +++ b/core/templates/installation.php @@ -15,10 +15,10 @@ script('core', [ <?php foreach($_['errors'] as $err): ?> <p> <?php if(is_array($err)):?> - <?php print_unescaped($err['error']); ?> - <span class='hint'><?php print_unescaped($err['hint']); ?></span> + <?php p($err['error']); ?> + <span class='hint'><?php p($err['hint']); ?></span> <?php else: ?> - <?php print_unescaped($err); ?> + <?php p($err); ?> <?php endif; ?> </p> <?php endforeach; ?> |