Quote updater URLv14.0.9RC1

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

1 files changed, 1 insertions, 1 deletions

diff --git a/index.php b/index.php
index 09f293c..3ee0c14 100644
--- a/index.php
+++ b/index.php
@@ -1737,7 +1737,7 @@ if(strpos($updaterUrl, 'index.php') === false) {
 				<li id="step-done" class="step <?php if($stepNumber >= 12) { echo 'passed-step'; }?>">
 					<h2>Done</h2>
 					<div class="output hidden">
-						<a class="button" href="<?php echo str_replace('/index.php', '/../', $updaterUrl); ?>">Go back to your Nextcloud instance to finish the update</a>
+						<a class="button" href="<?php echo htmlspecialchars(str_replace('/index.php', '/../', $updaterUrl), ENT_QUOTES); ?>">Go back to your Nextcloud instance to finish the update</a>
 					</div>
 				</li>
 			</ul>