Fix potential XSS from Username

2022-03-13 08:34:44 -04:00 · 2022-03-13 08:34:44 -04:00 · c6a1a4ff0e
parent 48d3526459
commit c6a1a4ff0e
1 changed files with 1 additions and 1 deletions
--- a/web/ajax/modals/logout.php
+++ b/web/ajax/modals/logout.php
@ -29,7 +29,7 @@ global $CLANG;
        </button>
      </div>
      <div class="modal-body">
-        <p><?php echo sprintf( $CLANG['CurrentLogin'], $user['Username'] ) ?></p>
+        <p><?php echo sprintf( $CLANG['CurrentLogin'], validHtmlStr($user['Username']) ) ?></p>
 <?php if ( canView('System') ) { ?>
        <p>Other logged in users:<br/>
 <table class="table table-striped">