From: Hypolite Petovan Date: Wed, 20 May 2020 01:07:55 +0000 (-0400) Subject: Remove HTML escaping in config file template, add quote escaping X-Git-Url: https://git.mxchange.org/?a=commitdiff_plain;h=6d5437721efd6ce023f1296c78e84fe72bdd2518;p=friendica.git Remove HTML escaping in config file template, add quote escaping - Allows HTML special characters and quotes in DB password --- diff --git a/view/templates/local.config.tpl b/view/templates/local.config.tpl index ad809c9d85..24b33b8cd4 100644 --- a/view/templates/local.config.tpl +++ b/view/templates/local.config.tpl @@ -7,10 +7,10 @@ return [ 'database' => [ - 'hostname' => '{{$dbhost}}', - 'username' => '{{$dbuser}}', - 'password' => '{{$dbpass}}', - 'database' => '{{$dbdata}}', + 'hostname' => '{{$dbhost|escape:'quotes' nofilter}}', + 'username' => '{{$dbuser|escape:'quotes' nofilter}}', + 'password' => '{{$dbpass|escape:'quotes' nofilter}}', + 'database' => '{{$dbdata|escape:'quotes' nofilter}}', 'charset' => 'utf8mb4', ], @@ -21,19 +21,19 @@ return [ // **************************************************************** 'config' => [ - 'php_path' => '{{$phpath}}', - 'admin_email' => '{{$adminmail}}', + 'php_path' => '{{$phpath|escape:'quotes' nofilter}}', + 'admin_email' => '{{$adminmail|escape:'quotes' nofilter}}', 'sitename' => 'Friendica Social Network', - 'hostname' => '{{$hostname}}', + 'hostname' => '{{$hostname|escape:'quotes' nofilter}}', 'register_policy' => \Friendica\Module\Register::OPEN, 'max_import_size' => 200000, ], 'system' => [ - 'urlpath' => '{{$urlpath}}', - 'url' => '{{$baseurl}}', - 'ssl_policy' => {{$sslpolicy}}, - 'basepath' => '{{$basepath}}', - 'default_timezone' => '{{$timezone}}', - 'language' => '{{$language}}', + 'urlpath' => '{{$urlpath|escape:'quotes' nofilter}}', + 'url' => '{{$baseurl|escape:'quotes' nofilter}}', + 'ssl_policy' => {{$sslpolicy|escape:'quotes' nofilter}}, + 'basepath' => '{{$basepath|escape:'quotes' nofilter}}', + 'default_timezone' => '{{$timezone|escape:'quotes' nofilter}}', + 'language' => '{{$language|escape:'quotes' nofilter}}', ], ];