Merge pull request #18 from g-sato/fix_security_bug

Security fix
josephernest · Oct 2, 2015 · 84b9615 · 84b9615
2 parents d037007 + de04f3c
commit 84b9615
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/index.php b/index.php
@@ -31,7 +31,7 @@ function getpage($page)
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title><?php echo (trim($pagetitle) ? "$sitename - $pagetitle" : "$sitename")?></title>
-  <base href="<?php echo $siteroot; ?>">
+  <base href="<?php echo htmlspecialchars($siteroot, ENT_QUOTES); ?>">
   <link rel="stylesheet" type="text/css" href="style.css">
 </head>
 <body>