Merge pull request #19815 from nextcloud/bugfix/noid/prevent-self-xss…

…-via-invalid-mysql-username Prevent self-xss via invalid mysql user name on install screen
nextcloud · Mar 7, 2020 · 1d5058b · 1d5058b
2 parents c9949d1 + 585b09a
commit 1d5058b
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/core/templates/installation.php b/core/templates/installation.php
@@ -15,10 +15,10 @@
 		<?php foreach($_['errors'] as $err): ?>
 		<p>
 			<?php if(is_array($err)):?>
-				<?php print_unescaped($err['error']); ?>
-				<span class='hint'><?php print_unescaped($err['hint']); ?></span>
+				<?php p($err['error']); ?>
+				<span class='hint'><?php p($err['hint']); ?></span>
 			<?php else: ?>
-				<?php print_unescaped($err); ?>
+				<?php p($err); ?>
 			<?php endif; ?>
 		</p>
 		<?php endforeach; ?>