Fix for /issues/1254

bludit · Aug 30, 2020 · b47b680 · b47b680
1 parent 6942177
commit b47b680
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/bl-kernel/admin/views/login.php b/bl-kernel/admin/views/login.php
@@ -11,7 +11,7 @@
 
 	echo '
 	<div class="form-group">
-		<input type="text" value="'.(isset($_POST['username'])?$_POST['username']:'').'" class="form-control form-control-lg" id="jsusername" name="username" placeholder="'.$L->g('Username').'" autofocus>
+		<input type="text" value="'.(isset($_POST['username'])?htmlspecialchars($_POST['username']):'').'" class="form-control form-control-lg" id="jsusername" name="username" placeholder="'.$L->g('Username').'" autofocus>
 	</div>
 	';