From a9efe6b52660752d1df2b85afdb3ad16e5823f5d Mon Sep 17 00:00:00 2001 From: Lindsay Evans Date: Thu, 20 Oct 2011 08:51:31 +1100 Subject: [PATCH] Escaping HTML characters in user copyright property --- index.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/index.php b/index.php index 1e25daa5..3ad8afb5 100644 --- a/index.php +++ b/index.php @@ -13,7 +13,7 @@ if (file_exists($user_file)) { $user = json_decode(file_get_contents($user_file)); - $holder = $user->copyright; + $holder = htmlentities($user->copyright); if (property_exists($user, 'url')) { $holder = '' . $holder . ''; }