Fixed another XSS issue: #1483830

roundcube · Sep 3, 2006 · bf04525 · bf04525
1 parent fda695f
commit bf04525
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/program/steps/mail/get.inc b/program/steps/mail/get.inc
@@ -29,7 +29,7 @@ if ($_GET['_preload'])
   $message = rcube_label('loadingdata');
 
   print "<html>\n<head>\n" .
-        '<meta http-equiv="refresh" content="0; url='.$url.'">' .
+        '<meta http-equiv="refresh" content="0; url='.htmlspecialchars($url).'">' .
         "\n</head>\n<body>" .
         $message .
         "\n</body>\n</html>";