Merge pull request opencart#13741 from mhcwebdesign/3.0.x.x

[3.0.x.x] Security patch
mhcwebdesign · Feb 28, 2024 · f4ae74e · f4ae74e
2 parents 089cdb5 + 0865148
commit f4ae74e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/upload/admin/controller/tool/log.php b/upload/admin/controller/tool/log.php
@@ -69,7 +69,7 @@ public function index() {
 
 				$data['error_warning'] = sprintf($this->language->get('error_warning'), basename($file), round(substr($size, 0, strpos($size, '.') + 4), 2) . $suffix[$i]);
 			} else {
-				$data['log'] = file_get_contents($file, FILE_USE_INCLUDE_PATH, null);
+				$data['log'] = htmlspecialchars(file_get_contents($file), ENT_COMPAT, 'UTF-8');
 			}
 		}