fixes GHSA-rr39-mf4j-6594 prevent displaying RAW cookie content

This commit is contained in:
plegall
2026-05-01 17:03:17 +02:00
parent 41da78f35a
commit aaa0309494
5 changed files with 5 additions and 5 deletions
+1 -1
View File
@@ -1057,7 +1057,7 @@ function log_user($user_id, $remember_me)
{
if (!array_key_exists($_COOKIE['lang'], get_languages()))
{
fatal_error('[Hacking attempt] the input parameter "'.$_COOKIE['lang'].'" is not valid');
fatal_error('[Hacking attempt] the input parameter "'.htmlspecialchars($_COOKIE['lang']).'" is not valid');
}
single_update(