diff options
| author |  Alexandre Alapetite <alexandre@alapetite.fr>
| 2018-06-22 16:07:48 +0200 |
|---|---|---|
| committer |  GitHub <noreply@github.com>
| 2018-06-22 16:07:48 +0200 |
| commit | a66b995be7d187a208bf7f66ce4d83911ba5932f (patch) | |
| tree | 87489cdd4591e175ef169de852e319fe3fa3c776 /app/FreshRSS.php | |
| parent | 0dab4f8bce46d6a1d81b4b369e5beaa4d385813f (diff) | |
Explicit quotes decoding (#1947)
* Explicit quotes decoding
* Explicit htmlspecialchars_decode and htmlspecialchars
Diffstat (limited to 'app/FreshRSS.php')
| -rw-r--r-- | app/FreshRSS.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/app/FreshRSS.php b/app/FreshRSS.php index 25fd429a2..2bd5135a9 100644 --- a/app/FreshRSS.php +++ b/app/FreshRSS.php @@ -66,7 +66,7 @@ class FreshRSS extends Minz_FrontController { 403, array('error' => array( _t('feedback.access.denied'), - ' [HTTP_REFERER=' . htmlspecialchars($http_referer) . ']' + ' [HTTP_REFERER=' . htmlspecialchars($http_referer, ENT_NOQUOTES, 'UTF-8') . ']' )) ); } |