Prevent code injection

Signed-off-by: Christian König <ckoenig@posteo.de>
2024-12-06 19:36:21 +01:00 · 2022-02-12 09:10:19 +01:00
parent be31e4ea58
commit bfe91d9da3
1 changed files with 1 additions and 1 deletions
@@ -20,7 +20,7 @@ if(isset($last_error) && ($last_error["type"] === E_WARNING || $last_error["type
 }

 # Timezone is set in docker via ENV otherwise get it from commandline
-$timezone=getenv("TZ");
+$timezone=htmlspecialchars(getenv("TZ"));
 if (empty($timezone)) {
 	$timezone=shell_exec("date +'%Z'");
 }