Browse Source

Merge pull request #1305 from nmalcolm/develop

Fixes XSS vulnerability in Profiler
Taylor Otwell 12 years ago
parent
commit
4f8a6724b0
1 changed files with 1 additions and 0 deletions
  1. 1 0
      laravel/profiling/profiler.php

+ 1 - 0
laravel/profiling/profiler.php

@@ -148,6 +148,7 @@ class Profiler {
 			$binding = Database::connection()->pdo->quote($binding);
 
 			$sql = preg_replace('/\?/', $binding, $sql, 1);
+			$sql = htmlspecialchars($sql);
 		}
 
 		static::$data['queries'][] = array($sql, $time);