Merge pull request #1005 from Emoe/master

Filtered some XSS in Error-Pages
anchorcms · Jan 30, 2016 · 8871a7f · 8871a7f
2 parents 8b2eda9 + 158c0ea
commit 8871a7f
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/anchor/views/error/404.php b/anchor/views/error/404.php
@@ -33,7 +33,7 @@
 
 		<h1>404</h1>
 
-		<p>The page <code><?php echo Uri::current(); ?></code> was not found.</p>
+		<p>The page <code><?php echo htmlspecialchars(Uri::current()); ?></code> was not found.</p>
 
 		<p>Try the <a href="/">homepage</a></p>
 

diff --git a/install/views/error/404.php b/install/views/error/404.php
@@ -33,7 +33,7 @@
 
 		<h1>404</h1>
 
-		<p>The page <code><?php echo Uri::current(); ?></code> was not found.</p>
+		<p>The page <code><?php echo htmlspecialchars(Uri::current()); ?></code> was not found.</p>
 
 		<p>Try the <a href="/">homepage</a></p>
 

diff --git a/system/error.php b/system/error.php
@@ -112,4 +112,4 @@ public static function log($e) {
 		}
 	}
 
-}
+}
-Original file line number
+Diff line change
@@ Expand Up / @@ -112,4 +112,4 @@ public static function log($e) { @@
     		}
     	}
-    }
+    }