From ef142b23127c910f20b3321c051619f475580797 Mon Sep 17 00:00:00 2001
From: Lukas Fleischer <lfleischer@archlinux.org>
Date: Wed, 10 Jun 2015 08:54:51 +0200
Subject: pkgbase.php: Escape error messages

Fixes FS#45284.

Signed-off-by: Lukas Fleischer <lfleischer@archlinux.org>
---
 web/html/pkgbase.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'web/html')

diff --git a/web/html/pkgbase.php b/web/html/pkgbase.php
index 2f8f932..c834f8b 100644
--- a/web/html/pkgbase.php
+++ b/web/html/pkgbase.php
@@ -146,9 +146,9 @@ html_header($title, $details);
 
 <?php if ($output): ?>
 <?php if ($ret): ?>
-<p class="pkgoutput"><?= $output ?></p>
+<p class="pkgoutput"><?= htmlspecialchars($output) ?></p>
 <?php else: ?>
-<ul class="errorlist"><li><?= $output ?></li></ul>
+<ul class="errorlist"><li><?= htmlspecialchars($output) ?></li></ul>
 <?php endif; ?>
 <?php endif; ?>
 
-- 
cgit v1.2.3-54-g00ecf