Changeset 13962 for trunk/admin/plugins_new.php

Timestamp:

Apr 7, 2012, 11:16:02 PM (12 years ago)

Author:

plg

Message:

merge r13961 from branch 2.3 to trunk

bug 2612 fixed: sanitize $_GETinstallstatus before display for
themes/languages/plugins installation

File:

• trunk/admin/plugins_new.php (modified) (1 diff)

trunk/admin/plugins_new.php

@@ -77 +77 @@
     default:
       array_push($page['errors'],
-        sprintf(l10n('An error occured during extraction (%s).'), $_GET['installstatus']),
+        sprintf(l10n('An error occured during extraction (%s).'), htmlspecialchars($_GET['installstatus'])),
         l10n('Please check "plugins" folder and sub-folders permissions (CHMOD).'));
   }