fix XSS

BOINC · Dec 21, 2024 · c08cd58 · c08cd58
1 parent 443889e
commit c08cd58
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/html/user/job_file.php b/html/user/job_file.php
@@ -299,7 +299,7 @@ function upload_files($r) {
 $req = $_POST['request'];
 $r = simplexml_load_string($req);
 if (!$r) {
-    xml_error(-1, "can't parse request message: $req", __FILE__, __LINE__);
+    xml_error(-1, "can't parse request message: ".htmlspecialchars($req), __FILE__, __LINE__);
 }
 
 switch($r->getName()) {