Merge pull request #19830 from nextcloud/backport/19815/stable18

[stable18] Prevent self-xss via invalid mysql user name on install screen
This commit is contained in:
Roeland Jago Douma 2020-03-09 09:03:57 +01:00 committed by GitHub
commit a88da0c41f
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -15,10 +15,10 @@ script('core', [
<?php foreach($_['errors'] as $err): ?>
<p>
<?php if(is_array($err)):?>
<?php print_unescaped($err['error']); ?>
<span class='hint'><?php print_unescaped($err['hint']); ?></span>
<?php p($err['error']); ?>
<span class='hint'><?php p($err['hint']); ?></span>
<?php else: ?>
<?php print_unescaped($err); ?>
<?php p($err); ?>
<?php endif; ?>
</p>
<?php endforeach; ?>