Bug: 14857

Escape user supplied color data, preventing XSS vuln.
horde · Sep 25, 2018 · dcad662 · dcad662
1 parent dede4ee
commit dcad662
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/View/Sidebar.php b/lib/View/Sidebar.php
@@ -221,7 +221,7 @@ public function addRow(array $row, $container = '')
             if (strlen($row['style'])) {
                 $row['style'] .= ';';
             }
-            $row['style'] .= 'background-color:' . $row['color']
+            $row['style'] .= 'background-color:' . htmlspecialchars($row['color'])
                 . ';color:#' . $foreground;
             if (isset($row['edit'])) {
                 $row['editLink'] = $row['edit']