diff --git a/upload/admin/controller/tool/log.php b/upload/admin/controller/tool/log.php index 389b95aba7d..635f1195ccc 100644 --- a/upload/admin/controller/tool/log.php +++ b/upload/admin/controller/tool/log.php @@ -69,7 +69,7 @@ public function index() { $data['error_warning'] = sprintf($this->language->get('error_warning'), basename($file), round(substr($size, 0, strpos($size, '.') + 4), 2) . $suffix[$i]); } else { - $data['log'] = file_get_contents($file, FILE_USE_INCLUDE_PATH, null); + $data['log'] = htmlspecialchars(file_get_contents($file), ENT_COMPAT, 'UTF-8'); } }