Cleaned up some issues with xss on error pages.

2016-03-02 15:51:51 +00:00
parent d74b24df43
commit 2d6917178d
5 changed files with 26 additions and 7 deletions
--- a/workflow/engine/controllers/adminProxy.php
+++ b/workflow/engine/controllers/adminProxy.php
@@ -313,7 +313,7 @@ class adminProxy extends HttpProxyController
    public function testingOption($params)
    {
        $data['success'] = true;
-        $data['optionAuthS'] = $params->optionAuthS;
+        $data['optionAuthS'] = htmlspecialchars($params->optionAuthS;
        return $data;

    }