Cleaned up some issues with xss on error pages.

2016-03-02 15:51:51 +00:00
parent d74b24df43
commit 2d6917178d
5 changed files with 26 additions and 7 deletions
--- a/framework/src/templates/Exception.phtml
+++ b/framework/src/templates/Exception.phtml
@@ -70,7 +70,7 @@
    <div class="block_exception clear_fix">
        <h2>
            <abbr title="RuntimeException">RuntimeException</abbr>:
-            <pre><?php echo $message?></pre>
+            <pre><?php echo htmlspecialchars($message)?></pre>
        </h2>
    </div>
    <div class="block">
@@ -88,4 +88,4 @@
    </div>
 </div>
 </body>
-</html>
+</html>