Merge pull request #2 from jadeops/main

Fix XSS
2025-10-09 15:52:10 +03:00
parent d4b7580962 d4e58733f1
commit 5d541e8021
1 changed files with 1 additions and 1 deletions
--- a/app/Views/layout/base.php
+++ b/app/Views/layout/base.php
@@ -50,7 +50,7 @@ if (!isset($appName)) {
    try {
        $settingModel = new \App\Models\Setting();
        $appSettings = $settingModel->getAppSettings();
-        $appName = $appSettings['app_name'];
+        $appName = htmlspecialchars($appSettings['app_name']);
        $appTimezone = $appSettings['app_timezone'];
        
        // Set PHP timezone