[Pkg-owncloud-commits] [owncloud] 09/73: Sanitize user input

Fri Nov 8 23:08:58 UTC 2013

This is an automated email from the git hooks/post-receive script.

taffit pushed a commit to annotated tag v4.0.10
in repository owncloud.

commit aae17d4ae87085a024d637bc836ba2bd226b32ce
Author: Lukas Reschke <lukas at statuscode.ch>
Date:   Thu Aug 9 22:14:48 2012 +0200

    Sanitize user input
---
 apps/gallery/sharing.php |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/gallery/sharing.php b/apps/gallery/sharing.php
index 44fcd9c..a9683c0 100644
--- a/apps/gallery/sharing.php
+++ b/apps/gallery/sharing.php
@@ -37,7 +37,7 @@ OCP\App::checkAppEnabled('gallery');
     <script src="http://ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js" type="text/javascript"></script>
     <script src="js/sharing.js" type="text/javascript"></script>
     <script>
-      var TOKEN = '<?php echo $_GET['token']; ?>';
+      var TOKEN = '<?php htmlentities(echo $_GET['token']); ?>';
     </script>
   </head>
   <body>

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-owncloud/owncloud.git

