Changeset 13961 for branches/2.3/admin/themes_new.php

Timestamp:

Apr 7, 2012, 11:12:25 PM (12 years ago)

Author:

plg

Message:

bug 2612 fixed: sanitize $_GETinstallstatus before display for
themes/languages/plugins installation

File:

• branches/2.3/admin/themes_new.php (modified) (1 diff)

branches/2.3/admin/themes_new.php

@@ -103 +103 @@
       array_push(
         $page['errors'],
-        sprintf(l10n('An error occured during extraction (%s).'), $_GET['installstatus'])
+        sprintf(l10n('An error occured during extraction (%s).'), htmlspecialchars($_GET['installstatus']))
         );
   }