XSS vulnerability when remote-subscribing

[quix0rs-gnu-social.git] / actions / avatarbynickname.php

diff --git a/actions/avatarbynickname.php b/actions/avatarbynickname.php
index dc80ec952ed85543650ff8455c8b87aad00b7659..10a22e77bc199c61627b836135aaa600e3c0f898 100644 (file)
--- a/actions/avatarbynickname.php
+++ b/actions/avatarbynickname.php
@@ -34,7 +34,7 @@ if (!defined('GNUSOCIAL')) { exit(1); }
  * Retrieve user avatar by nickname action class.
  *
  * @category Action
- * @package  GNUSocial
+ * @package  GNUsocial
  * @author   Evan Prodromou <evan@status.net>
  * @author   Robin Millette <millette@status.net>
  * @author   Mikael Nordfeldth <mmn@hethane.se>
@@ -73,9 +73,9 @@ class AvatarbynicknameAction extends Action
 
         if ($size === 'original') {
             try {
-                $avatar = Avatar::getOriginal($profile);
+                $avatar = Avatar::getUploaded($profile);
                 $url = $avatar->displayUrl();
-            } catch (Exception $e) {
+            } catch (NoAvatarException $e) {
                 $url = Avatar::defaultImage(AVATAR_PROFILE_SIZE);
             }
         } else {