Fix a possible XSS

dompdf · Mar 19, 2014 · d13682b · d13682b
1 parent 378df0a
commit d13682b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/www/make_subset.php b/www/make_subset.php
@@ -61,7 +61,7 @@
   <link rel="stylesheet" href="css/style.css" />
 </head>
 <body>
-  <h1><?php echo $name; ?></h1>
+  <h1><?php echo htmlentities($name); ?></h1>
   <form name="make-subset" method="post" action="?fontfile=<?php echo $fontfile; ?>">
     <label>
       Insert the text from which you want the glyphs in the subsetted font: <br />