LBRYFoundation/lbry.com
1
0
Fork 0
mirror of https://github.com/LBRYFoundation/lbry.com.git synced 2025-09-02 10:15:10 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix xss with error message

Browse source
This commit is contained in:
maximest-pierre 2018-03-23 06:52:03 -04:00
parent e0434d0220
commit bd1d3e5c04
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
controller/action/AcquisitionActions.class.php
View file

@ -32,7 +32,7 @@ class AcquisitionActions extends Actions
{
return ['acquisition/youtube', [
'reward' => LBRY::youtubeReward(),
'error_message' => $_GET['error_message'] ?? null
'error_message' => Request::encodeStringFromUser($_GET['error_message']) ?? null
]];
}
@ -51,7 +51,7 @@ class AcquisitionActions extends Actions
return ['acquisition/youtube_status', [
'token' => $token,
'status_token' => LBRY::statusYoutube($token),
'error_message' => $_GET['error_message'] ?? null
'error_message' => Request::encodeStringFromUser($_GET['error_message']) ?? null
]];
}