Home Explore Help
Sign In
githab
/
cakephp
2
0
Fork 0
Files Issues 0 Pull Requests 0 Wiki
Browse Source

Escape exception message content.

It is possible for exception messages to have unsafe content in them.
Mark Story 10 years ago
parent
09bb01d14b
commit
bbc8ceea8a
1 changed files with 2 additions and 2 deletions
Split View Show Diff Stats
  1. 2 2
      src/Template/Layout/dev_error.ctp

+ 2 - 2
src/Template/Layout/dev_error.ctp
View File 

@@ -20,7 +20,7 @@ use Cake\Error\Debugger;
 
     <?= $this->Html->charset() ?>
 
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
 
     <title>
 
-        Error: <?= $this->fetch('title') ?>
 
+        Error: <?= h($this->fetch('title')) ?>
 
     </title>
 
     <?= $this->Html->meta('icon') ?>
 
     <style>
 
@@ -202,7 +202,7 @@ use Cake\Error\Debugger;
 
 <body>
 
     <header>
 
         <h1 class="header-title">
 
-            <?= $this->fetch('title') ?>
 
+            <?= h($this->fetch('title')) ?>
 
             <span class="header-type"><?= get_class($error) ?></span>
 
         </h1>
 
         <div class="header-help">