Merge pull request #1 from Naleksuh/patch-2

properly sanitizes username
InternationalScratchWiki · Sep 15, 2020 · 44c6ff3 · 44c6ff3
2 parents 3f1af08 + 4160a39
commit 44c6ff3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/ScratchSig2.php b/ScratchSig2.php
@@ -67,7 +67,7 @@ function sigGetAvatarUrl ($username) {
 // Called to output HTML for <scratchsig> tag
 
 function sigRenderTag ($input, array $args, Parser $parser, PPFrame $frame) {
-    $username = $input;
+    $username = htmlspecialchars($input);
 
     $img_url = sigGetAvatarUrl($username);