Fix XSS in Delete Repository page

Fixes #338
mantisbt-plugins · Feb 13, 2020 · 270675c · 270675c
1 parent 962bd40
commit 270675c
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/Source/pages/repo_delete.php b/Source/pages/repo_delete.php
@@ -10,7 +10,8 @@
 
 $t_repo = SourceRepo::load( $f_repo_id );
 
-helper_ensure_confirmed( sprintf( plugin_lang_get( 'ensure_delete' ), $t_repo->name ), plugin_lang_get( 'delete_repository' ) );
+$t_message = sprintf( plugin_lang_get( 'ensure_delete' ), string_attribute( $t_repo->name ) );
+helper_ensure_confirmed( $t_message, plugin_lang_get( 'delete_repository' ) );
 
 SourceRepo::delete( $t_repo->id );