Merge pull request #1305 from nmalcolm/develop

Fixes XSS vulnerability in Profiler
2012-10-02 17:22:11 -07:00 · 2012-10-02 17:22:11 -07:00 · 4f8a6724b0
parent 4d3c68129b 2d5cc12b7b
commit 4f8a6724b0
1 changed files with 1 additions and 0 deletions
--- a/laravel/profiling/profiler.php
+++ b/laravel/profiling/profiler.php
@ -148,6 +148,7 @@ public static function query($sql, $bindings, $time)
 			$binding = Database::connection()->pdo->quote($binding);

 			$sql = preg_replace('/\?/', $binding, $sql, 1);
+			$sql = htmlspecialchars($sql);
 		}

 		static::$data['queries'][] = array($sql, $time);