Fix reflected XSS vulnerability

bigprof-software · Jul 1, 2021 · ccc50f1 · ccc50f1
1 parent 2a29c6b
commit ccc50f1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/membership_passwordReset.php b/app/membership_passwordReset.php
@@ -82,7 +82,7 @@
 							</div>
 						</div>
 
-						<input type="hidden" name="key" value="<?php echo $_GET['key']; ?>">
+						<input type="hidden" name="key" value="<?php echo html_attr($_GET['key']); ?>">
 					</form>
 				</div>
 			</div>