FOSS/mailcow-dockerized
0
0
Fork 0
mirror of https://github.com/mailcow/mailcow-dockerized.git synced 2026-07-25 09:04:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

Escape generated password in mobileconfig

Browse Source 
Escape ampersand, less than, greater than to avoid generating invalid XML.

Fixes #7171
This commit is contained in:
Michael Kuron
2026-05-02 16:24:01 +02:00
committed by Michael Kuron
parent 886dbcc419
commit ffbc37a00c
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
data/web/mobileconfig.php
+1
View File
@@ -65,6 +65,7 @@ if (isset($_GET['app_password'])) {
$attr['protocols'][] = 'dav_access'; $attr['protocols'][] = 'dav_access';
} }
app_passwd("add", $attr); app_passwd("add", $attr);
$password = htmlspecialchars($password, ENT_NOQUOTES);
} else { } else {
$app_password = false; $app_password = false;
} }