From: Jens Frank <jeluf@users.mediawiki.org>
Date: Wed, 13 Oct 2004 21:07:08 +0000 (+0000)
Subject: Fix cross site scripting bug
X-Git-Tag: 1.5.0alpha1~1565
X-Git-Url: http://git.cyclocoop.org/wiki/Target_page?a=commitdiff_plain;h=3c4a91bc34ad07a511ee11aa620af186e3562894;p=lhc%2Fweb%2Fwiklou.git

Fix cross site scripting bug
---

diff --git a/includes/SpecialEmailuser.php b/includes/SpecialEmailuser.php
index 9661a1c78d..35d3cce509 100644
--- a/includes/SpecialEmailuser.php
+++ b/includes/SpecialEmailuser.php
@@ -114,9 +114,8 @@ class EmailUserForm {
 </tr><tr>
 <td align=right>{$emm}:</td>
 <td align=left>
-<textarea name=\"wpText\" rows=10 cols=60 wrap=virtual>
-{$this->text}
-</textarea>
+<textarea name=\"wpText\" rows=10 cols=60 wrap=virtual>" . htmlspecialchars( $this->text ) .
+"</textarea>
 </td></tr><tr>
 <td>&nbsp;</td><td align=left>
 <input type=submit name=\"wpSend\" value=\"{$ems}\">