1
0
mirror of https://github.com/phpbb/phpbb.git synced 2025-04-20 07:42:09 +02:00

Merge pull request #3312 from bantu/ticket/13527

[ticket/13527] Escape information received from version server

* bantu/ticket/13527:
  [ticket/13527] Apply htmlspecialchars() to data from version server.
  [ticket/13527] Remove two unused variables.
This commit is contained in:
Andreas Fischer 2015-01-20 23:14:38 +01:00
commit d17904884e

View File

@ -34,10 +34,7 @@ class acp_update
$this->page_title = 'ACP_VERSION_CHECK';
// Get current and latest version
$errstr = '';
$errno = 0;
$info = obtain_latest_version_info(request_var('versioncheck_force', false));
$info = htmlspecialchars(obtain_latest_version_info(request_var('versioncheck_force', false)));
if (empty($info))
{