pkgbase.php: Escape error messages

Fixes FS#45284.

Signed-off-by: Lukas Fleischer <lfleischer@archlinux.org>
This commit is contained in:
Lukas Fleischer 2015-06-10 08:54:51 +02:00
parent b870c0b682
commit ef142b2312

View file

@ -146,9 +146,9 @@ html_header($title, $details);
<?php if ($output): ?> <?php if ($output): ?>
<?php if ($ret): ?> <?php if ($ret): ?>
<p class="pkgoutput"><?= $output ?></p> <p class="pkgoutput"><?= htmlspecialchars($output) ?></p>
<?php else: ?> <?php else: ?>
<ul class="errorlist"><li><?= $output ?></li></ul> <ul class="errorlist"><li><?= htmlspecialchars($output) ?></li></ul>
<?php endif; ?> <?php endif; ?>
<?php endif; ?> <?php endif; ?>