Prevent users from including attacks in their names.

This commit is contained in:
Starbeamrainbowlabs 2017-02-18 21:45:52 +00:00
parent 9702343735
commit 3c5815bf76
1 changed files with 1 additions and 1 deletions

View File

@ -1129,7 +1129,7 @@ class page_renderer
$result = "";
if(in_array($name, $settings->admins))
$result .= $settings->admindisplaychar;
$result .= "<a href='?page=" . rawurlencode(get_user_pagename($name)) . "'>$name</a>";
$result .= "<a href='?page=" . rawurlencode(get_user_pagename($name)) . "'>" . htmlentities($name) . "</a>";
return $result;
}