Special characters should be escaped

This commit is contained in:
Michael Vogel 2016-09-23 06:29:02 +00:00
commit 3f35fed35a
3 changed files with 4 additions and 4 deletions

View file

@ -17,7 +17,7 @@
<html>
<head>
<title><?php if(x($page,'title')) echo $page['title'] ?></title>
<meta request="<?php echo $_REQUEST['pagename'] ?> ">
<meta request="<?php echo htmlspecialchars($_REQUEST['pagename']) ?> ">
<script>var baseurl="<?php echo $a->get_baseurl() ?>";</script>
<script>var frio="<?php echo "view/theme/frio"; ?>";</script>
<?php $baseurl = $a->get_baseurl(); ?>

View file

@ -11,7 +11,7 @@
<head>
<title><?php if(x($page,'title')) echo $page['title'] ?></title>
<meta name="viewport" content="initial-scale=1.0">
<meta request="<?php echo $_REQUEST['pagename'] ?> ">
<meta request="<?php echo htmlspecialchars($_REQUEST['pagename']) ?> ">
<script>var baseurl="<?php echo $a->get_baseurl() ?>";</script>
<script>var frio="<?php echo "view/theme/frio"; ?>";</script>
<?php $baseurl = $a->get_baseurl(); ?>