Escape error message in abort

DistributedProofreaders · Feb 9, 2022 · acd3fdf · acd3fdf
1 parent 9c25e09
commit acd3fdf
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pinc/abort.inc b/pinc/abort.inc
@@ -20,7 +20,7 @@ function abort($error_message)
 
     echo "<hr>\n";
 
-    echo "<p class='error'>$error_message</p>\n";
+    echo "<p class='error'>" . html_safe($error_message) . "</p>\n";
     echo "<pre>\n";
     dump_request_info();