mbk-lab
/
nextcloud
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Merge pull request #19832 from nextcloud/backport/19815/stable16 

[stable16] Prevent self-xss via invalid mysql user name on install screen
This commit is contained in:
Roeland Jago Douma 2020-03-09 09:03:32 +01:00 committed by GitHub
parent f8569fc038 985d2c9447
commit 8df76b56fc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
core/templates/installation.php
View File

@ -15,10 +15,10 @@ script('core', [
<?php foreach($_['errors'] as $err): ?> <?php foreach($_['errors'] as $err): ?>
<p> <p>
<?php if(is_array($err)):?> <?php if(is_array($err)):?>
<?php print_unescaped($err['error']); ?> <?php p($err['error']); ?>
<span class='hint'><?php print_unescaped($err['hint']); ?></span> <span class='hint'><?php p($err['hint']); ?></span>
<?php else: ?> <?php else: ?>
<?php print_unescaped($err); ?> <?php p($err); ?>
<?php endif; ?> <?php endif; ?>
</p> </p>
<?php endforeach; ?> <?php endforeach; ?>