Fix XSS in creatures.php, thanks to @gesior

Closes #254
This commit is contained in:
slawkens
2024-05-15 22:15:36 +02:00
parent 2793c41655
commit 02eea950e4
2 changed files with 2 additions and 2 deletions

View File

@@ -1265,7 +1265,7 @@ function getCustomPage($page, &$success)
}
function escapeHtml($html) {
return htmlentities($html, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
return htmlspecialchars($html);
}
function displayErrorBoxWithBackButton($errors, $action = null) {