Escape verbose server name (bug #1362671).

2005-11-21 12:03:12 +00:00
parent d7b1759c54
commit bee36e92a8
4 changed files with 9 additions and 6 deletions
--- a/libraries/auth/cookie.auth.lib.php
+++ b/libraries/auth/cookie.auth.lib.php
@@ -266,9 +266,9 @@ if (top != self) {
                }
                echo '>';
                if ($val['verbose'] != '') {
-                    echo $val['verbose'];
+                    echo htmlspecialchars($val['verbose']);
                } else {
-                    echo $val['host'];
+                    echo htmlspecialchars($val['host']);
                    if (!empty($val['port'])) {
                        echo ':' . $val['port'];
                    }