From 5a5c59639bc24d2c4ed57fb8d0b7abda86f0b829 Mon Sep 17 00:00:00 2001
From: Morris Jobke <hey@morrisjobke.de>
Date: Tue, 21 Jul 2015 00:26:30 +0200
Subject: [PATCH] Escape ampersand in logout URL

* fixes #17757
---
 lib/private/user.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/private/user.php b/lib/private/user.php
index 1d8b89e273..9280724614 100644
--- a/lib/private/user.php
+++ b/lib/private/user.php
@@ -405,7 +405,7 @@ class OC_User {
 			return $backend->getLogoutAttribute();
 		}
 
-		return 'href="' . link_to('', 'index.php') . '?logout=true&requesttoken=' . urlencode(OC_Util::callRegister()) . '"';
+		return 'href="' . link_to('', 'index.php') . '?logout=true&amp;requesttoken=' . urlencode(OC_Util::callRegister()) . '"';
 	}
 
 	/**