summaryrefslogtreecommitdiffstats
path: root/web/html
diff options
context:
space:
mode:
authorLukas Fleischer <lfleischer@archlinux.org>2015-06-10 08:54:51 +0200
committerLukas Fleischer <lfleischer@archlinux.org>2015-06-10 08:54:51 +0200
commitef142b23127c910f20b3321c051619f475580797 (patch)
tree2408eefc9db39a706b3050f6d2ebcf3d00d0f22b /web/html
parentb870c0b682c35cca26a45d5394737083b5fab8d6 (diff)
downloadaur-ef142b23127c910f20b3321c051619f475580797.tar.gz
aur-ef142b23127c910f20b3321c051619f475580797.tar.xz
pkgbase.php: Escape error messages
Fixes FS#45284. Signed-off-by: Lukas Fleischer <lfleischer@archlinux.org>
Diffstat (limited to 'web/html')
-rw-r--r--web/html/pkgbase.php4
1 files changed, 2 insertions, 2 deletions
diff --git a/web/html/pkgbase.php b/web/html/pkgbase.php
index 2f8f932b..c834f8b5 100644
--- a/web/html/pkgbase.php
+++ b/web/html/pkgbase.php
@@ -146,9 +146,9 @@ html_header($title, $details);
<?php if ($output): ?>
<?php if ($ret): ?>
-<p class="pkgoutput"><?= $output ?></p>
+<p class="pkgoutput"><?= htmlspecialchars($output) ?></p>
<?php else: ?>
-<ul class="errorlist"><li><?= $output ?></li></ul>
+<ul class="errorlist"><li><?= htmlspecialchars($output) ?></li></ul>
<?php endif; ?>
<?php endif; ?>