geckon01/whoops
1
0
Fork 0
mirror of https://github.com/filp/whoops.git synced 2026-09-03 05:57:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fixed XXS vulnerability in plainText rendered content. Closes #497.

Browse Source
This commit is contained in:
Markus Staab
2017-05-17 19:09:39 +02:00
committed by GitHub
parent c871522057
commit 4f34cb4444
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/Whoops/Handler/PrettyPageHandler.php
+1 -1
View File
@@ -258,7 +258,7 @@ class PrettyPageHandler extends Handler
$plainTextHandler = new PlainTextHandler();
$plainTextHandler->setException($this->getException());
$plainTextHandler->setInspector($this->getInspector());
$vars["preface"] = "<!--\n\n\n" . $plainTextHandler->generateResponse() . "\n\n\n\n\n\n\n\n\n\n\n-->";
$vars["preface"] = "<!--\n\n\n" . $this->templateHelper->escape($plainTextHandler->generateResponse()) . "\n\n\n\n\n\n\n\n\n\n\n-->";
$this->templateHelper->setVariables($vars);
$this->templateHelper->render($templateFile);