Sanitzing user input

14 years ago · d294373f47
parent f8337c9d72
commit d294373f47
1 changed files with 1 additions and 1 deletions
--- a/apps/user_ldap/settings.php
+++ b/apps/user_ldap/settings.php
@ -47,7 +47,7 @@ if ($_POST) {
 // fill template
 $tmpl = new OCP\Template( 'user_ldap', 'settings');
 foreach($params as $param){
-		$value = OCP\Config::getAppValue('user_ldap', $param,'');
+		$value = htmlentities(OCP\Config::getAppValue('user_ldap', $param,''));
 		$tmpl->assign($param, $value);
 }