tonyair/silverstripe-framework
1
0
Fork 0
mirror of https://github.com/silverstripe/silverstripe-framework synced 2024-10-22 14:05:37 +02:00
Code Issues Projects Releases Wiki Activity

[CVE-2020-9311] Escape First Name when displaying re-login screen

Browse Source
This commit is contained in:
Maxime Rainville 2020-04-23 16:41:04 +12:00
parent 8f9bb9d03a
commit d3b23e7024
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
security/CMSSecurity.php
View File

@ -86,7 +86,7 @@ class CMSSecurity extends Security {
'CMSSecurity.TimedOutTitleMember',
'Hey {name}!<br />Your session has timed out.',
'Title for CMS popup login form for a known user',
array('name' => $member->FirstName)
array('name' => Convert::raw2xml($member->FirstName))
);
} else {
return _t(

2
security/MemberLoginForm.php
View File

@ -139,7 +139,7 @@ JS;
$this->message = _t(
'Member.LOGGEDINAS',
"You're logged in as {name}.",
array('name' => $member->{$this->loggedInAsField})
array('name' => Convert::raw2xml($member->{$this->loggedInAsField}))
);
}