Fixes Issue #175

Encode HTML entities to prevent some XSS exploits.
LMS-Community · Nov 14, 2017 · cf09b99 · cf09b99
1 parent f4f567c
commit cf09b99
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/HTML/EN/html/errors/403.html b/HTML/EN/html/errors/403.html
@@ -1,4 +1,4 @@
 <HTML><HEAD><TITLE>403 Forbidden</TITLE></HEAD>
-<BODY>403 Forbidden: [% path %]
+<BODY>403 Forbidden: [% path | html_entity %]
 [% validURL %]
 </BODY></HTML>
diff --git a/HTML/EN/html/errors/404.html b/HTML/EN/html/errors/404.html
@@ -1,4 +1,4 @@
 <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD>
-<BODY>404 Not Found: [% path %]
+<BODY>404 Not Found: [% path | html_entity %]
 [% IF suggestion %]<p>[% suggestion | html %]</p>[% END %]
 </BODY></HTML>