tonyair/silverstripe-framework
1
0
Fork 0
mirror of https://github.com/silverstripe/silverstripe-framework synced 2024-10-22 14:05:37 +02:00
Code Issues Projects Releases Wiki Activity

[CVE-2020-9311] Escape First Name when displaying re-login screen

Browse Source
This commit is contained in:
Maxime Rainville 2020-04-23 16:41:04 +12:00
parent 8f9bb9d03a
commit d3b23e7024
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
security/CMSSecurity.php
View File

@ -86,7 +86,7 @@ class CMSSecurity extends Security {
'CMSSecurity.TimedOutTitleMember', 'CMSSecurity.TimedOutTitleMember',
'Hey {name}!<br />Your session has timed out.', 'Hey {name}!<br />Your session has timed out.',
'Title for CMS popup login form for a known user', 'Title for CMS popup login form for a known user',
array('name' => $member->FirstName) array('name' => Convert::raw2xml($member->FirstName))
); );
} else { } else {
return _t( return _t(

2
security/MemberLoginForm.php
View File

@ -139,7 +139,7 @@ JS;
$this->message = _t( $this->message = _t(
'Member.LOGGEDINAS', 'Member.LOGGEDINAS',
"You're logged in as {name}.", "You're logged in as {name}.",
array('name' => $member->{$this->loggedInAsField}) array('name' => Convert::raw2xml($member->{$this->loggedInAsField}))
); );
} }