wbrawner/server
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Correctly escape the footer description from theming

Browse source 
Signed-off-by: Joas Schilling <coding@schilljs.com>
This commit is contained in:
Joas Schilling 2017-03-16 15:01:50 +01:00
parent 57c1be8633
commit e8750f618b
No known key found for this signature in database
GPG key ID: E166FD8976B3BAC8
2 changed files with 5 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
apps/files_sharing/templates/public.php
View file

@ -120,7 +120,7 @@ $maxUploadFilesize = min($upload_max_filesize, $post_max_size);
<input type="hidden" name="dir" id="dir" value="" />
<div class="hiddenuploadfield">
<input type="file" id="file_upload_start" class="hiddenuploadfield" name="files[]"
data-url="<?php print_unescaped(OCP\Util::linkTo('files', 'ajax/upload.php')); ?>" />
data-url="<?php p(OCP\Util::linkTo('files', 'ajax/upload.php')); ?>" />
</div>
<?php endif; ?>
<footer>

8
apps/theming/lib/ThemingDefaults.php
View file

@ -81,7 +81,7 @@ class ThemingDefaults extends \OC_Defaults {
}
public function getName() {
return $this->config->getAppValue('theming', 'name', $this->name);
return strip_tags($this->config->getAppValue('theming', 'name', $this->name));
}
public function getHTMLName() {
@ -89,11 +89,11 @@ class ThemingDefaults extends \OC_Defaults {
}
public function getTitle() {
return $this->config->getAppValue('theming', 'name', $this->name);
return $this->getName();
}
public function getEntity() {
return $this->config->getAppValue('theming', 'name', $this->name);
return $this->getName();
}
public function getBaseUrl() {
@ -101,7 +101,7 @@ class ThemingDefaults extends \OC_Defaults {
}
public function getSlogan() {
return $this->config->getAppValue('theming', 'slogan', $this->slogan);
return \OC_Util::sanitizeHTML($this->config->getAppValue('theming', 'slogan', $this->slogan));
}
public function getShortFooter() {