Add missing h() calls to exception stack traces.

cakephp · May 10, 2013 · a49c69a · a49c69a
1 parent b533c1b
commit a49c69a
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/lib/Cake/View/Elements/exception_stack_trace.ctp b/lib/Cake/View/Elements/exception_stack_trace.ctp
@@ -55,10 +55,10 @@ App::uses('Debugger', 'Utility');
 			'<a href="#" onclick="traceToggle(event, \'trace-args-%s\')">%s(%s)</a> ',
 			$i,
 			$called,
-			implode(', ', $args)
+			h(implode(', ', $args))
 		);
 		$arguments = sprintf('<div id="trace-args-%s" class="cake-code-dump" style="display: none;"><pre>', $i);
-		$arguments .= implode("\n", $params);
+		$arguments .= h(implode("\n", $params));
 		$arguments .= '</pre></div>';
 	endif;
 	echo $excerpt;