Skip to content

Commit

Permalink
Merge pull request #3000 from big-dream/6.1-issues-2996
Browse files Browse the repository at this point in the history
修正 $key 未编码导致的异常页面 XSS 漏洞(ThinkPHP 6.1)
  • Loading branch information
big-dream authored Apr 16, 2024
2 parents 2d833b2 + 289eb43 commit 57d1950
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion src/tpl/think_exception.tpl
Original file line number Diff line number Diff line change
Expand Up @@ -68,7 +68,7 @@ if (!function_exists('parse_args')) {
break;
}

$result[] = is_int($key) ? $value : "'{$key}' => {$value}";
$result[] = is_int($key) ? $value : sprintf('\'%s\' => %s', htmlentities($key), $value);
}

return implode(', ', $result);
Expand Down

0 comments on commit 57d1950

Please # to comment.