Merge pull request #1262 from Tibinsunny/fix1

Fix for /issues/1254
bludit · Sep 25, 2020 · 309b39e · 309b39e
2 parents 50b3a87 + b47b680
commit 309b39e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/bl-kernel/admin/views/login.php b/bl-kernel/admin/views/login.php
@@ -11,7 +11,7 @@
 
 	echo '
 	<div class="form-group">
-		<input type="text" value="'.(isset($_POST['username'])?$_POST['username']:'').'" class="form-control form-control-lg" id="jsusername" name="username" placeholder="'.$L->g('Username').'" autofocus>
+		<input type="text" value="'.(isset($_POST['username'])?htmlspecialchars($_POST['username']):'').'" class="form-control form-control-lg" id="jsusername" name="username" placeholder="'.$L->g('Username').'" autofocus>
 	</div>
 	';