Merge pull request #17766 from owncloud/escape-ampersand

Escape ampersand in logout URL
10 years ago · 40170f35f6
parent 24f12e65ec 5a5c59639b
commit 40170f35f6
1 changed files with 1 additions and 1 deletions
--- a/lib/private/user.php
+++ b/lib/private/user.php
@ -405,7 +405,7 @@ class OC_User {
 			return $backend->getLogoutAttribute();
 		}

-		return 'href="' . link_to('', 'index.php') . '?logout=true&requesttoken=' . urlencode(OC_Util::callRegister()) . '"';
+		return 'href="' . link_to('', 'index.php') . '?logout=true&amp;requesttoken=' . urlencode(OC_Util::callRegister()) . '"';
 	}

 	/**