Fix potential XSS from Username

2022-03-13 08:34:44 -04:00 · 2022-03-13 08:34:44 -04:00 · 0db629fbba
parent 540748c923
commit 0db629fbba
1 changed files with 1 additions and 1 deletions
--- a/web/ajax/modals/logout.php
+++ b/web/ajax/modals/logout.php
@ -29,7 +29,7 @@ global $CLANG;
        </button>
      </div>
      <div class="modal-body">
-        <p><?php echo sprintf( $CLANG['CurrentLogin'], $user['Username'] ) ?></p>
+        <p><?php echo sprintf( $CLANG['CurrentLogin'], validHtmlStr($user['Username']) ) ?></p>
 <?php if ( canView('System') ) { ?>
        <p>Other logged in users:<br/>
 <table class="table table-striped">