Selaa lähdekoodia

[TwigBundle] fixed XSS in the exception template

Fabien Potencier 14 vuotta sitten
vanhempi
commit
5d9bd6da4f

+ 1 - 1
src/Symfony/Bundle/TwigBundle/Resources/views/Exception/exception.html.twig

@@ -12,7 +12,7 @@
                 </div>
 
                 <h1>
-                    {{ exception.message|replace({"\n": '<br />'})|format_file_from_text }}
+                    {{ exception.message|e|replace({"\n": '<br />'})|format_file_from_text }}
                 </h1>
 
                 <div>