HTML escape more stuff

This commit is contained in:
Jamie Cameron
2023-08-15 21:18:50 -07:00
parent f6c48e7a11
commit 8db4074d4d

View File

@@ -22,10 +22,12 @@ else {
if ($in{source} == 0) {
# installing from local file (or maybe directory)
if (!$in{'local'})
{ &install_error($text{'install_elocal'}); }
if (!-r $in{'local'})
{ &install_error(&text('install_elocal2', $in{'local'})); }
if (!$in{'local'}) {
&install_error($text{'install_elocal'});
}
if (!-r $in{'local'}) {
&install_error(&text('install_elocal2', &html_escape($in{'local'})));
}
$source = $in{'local'};
$pfile = $in{'local'};
$filename = $in{'local'};