Mirrors/mailcow-dockerized
1
0
Fork 0
mirror of https://github.com/mailcow/mailcow-dockerized.git synced 2026-07-17 16:45:06 +00:00
Code Issues Projects Releases Wiki Activity

Escape generated password in mobileconfig

Browse source 
Escape ampersand, less than, greater than to avoid generating invalid XML.

Fixes #7171
This commit is contained in:
Michael Kuron 2026-05-02 16:24:01 +02:00 • committed by Michael Kuron
parent 886dbcc419
commit ffbc37a00c
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
data/web/mobileconfig.php
View file

@ -65,6 +65,7 @@ if (isset($_GET['app_password'])) {
$attr['protocols'][] = 'dav_access';
}
app_passwd("add", $attr);
$password = htmlspecialchars($password, ENT_NOQUOTES);
} else {
$app_password = false;
}