From 0a49bae87aecef9f6d51007fe02a5071b2f662a4 Mon Sep 17 00:00:00 2001
From: Thomas Tanghus <thomas@tanghus.net>
Date: Fri, 8 Jun 2012 20:38:06 +0200
Subject: [PATCH] Contacts: Closed stupid XSS hole. Thanks AnybodyElse ;-)
---
apps/contacts/ajax/uploadphoto.php | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/apps/contacts/ajax/uploadphoto.php b/apps/contacts/ajax/uploadphoto.php
index 09c4e55d4a..32abc6c285 100644
--- a/apps/contacts/ajax/uploadphoto.php
+++ b/apps/contacts/ajax/uploadphoto.php
@@ -59,7 +59,7 @@ if ($fn) {
bailOut(OC_Contacts_App::$l10n->t('Couldn\'t save temporary image: ').$tmpkey);
}
} else {
- bailOut(OC_Contacts_App::$l10n->t('Couldn\'t load temporary image: ').$tmpkey.$data);
+ bailOut(OC_Contacts_App::$l10n->t('Couldn\'t load temporary image: ').$tmpkey);
}
}
--
GitLab