Avoid XSS in error message output

2017-07-26 23:16:08 +02:00 · 2017-07-26 23:16:08 +02:00 · ca9f6c2d57
parent 1e3f4e4062
commit ca9f6c2d57
1 changed files with 1 additions and 2 deletions
--- a/src/Exception.php
+++ b/src/Exception.php
@ -35,7 +35,6 @@ class Exception extends \Exception
     */
    public function errorMessage()
    {
-        $errorMsg = '<strong>' . $this->getMessage() . "</strong><br />\n";
-        return $errorMsg;
+        return '<strong>' . htmlspecialchars($this->getMessage()) . "</strong><br />\n";
    }
 }