XSS in login form

2012-01-07 21:10:10 +11:00 · 2012-01-07 21:10:10 +11:00 · c7d72306ed
commit c7d72306ed
parent b6d2049132
1 changed files with 1 additions and 1 deletions
--- a/inc/display.php
+++ b/inc/display.php
@ -99,7 +99,7 @@
 			'body'=>Element('login.html', Array(
 				'config'=>$config,
 				'error'=>$error,
-				'username'=>$username,
+				'username'=>utf8tohtml($username),
 				'redirect'=>$redirect
 				)
 			)