[Web] Fixes #1013 by encoding display name in XML request

master
André Peters 2018-02-09 23:03:08 +01:00
parent 64dbd54478
commit 550888cfb4
1 changed files with 2 additions and 2 deletions

View File

@ -148,7 +148,7 @@ else {
?> ?>
<Response xmlns="http://schemas.microsoft.com/exchange/autodiscover/outlook/responseschema/2006a"> <Response xmlns="http://schemas.microsoft.com/exchange/autodiscover/outlook/responseschema/2006a">
<User> <User>
<DisplayName><?=$displayname;?></DisplayName> <DisplayName><?=htmlspecialchars($displayname, ENT_XML1 | ENT_QUOTES, 'UTF-8');?></DisplayName>
</User> </User>
<Account> <Account>
<AccountType>email</AccountType> <AccountType>email</AccountType>
@ -196,7 +196,7 @@ else {
<Response xmlns="http://schemas.microsoft.com/exchange/autodiscover/mobilesync/responseschema/2006"> <Response xmlns="http://schemas.microsoft.com/exchange/autodiscover/mobilesync/responseschema/2006">
<Culture>en:en</Culture> <Culture>en:en</Culture>
<User> <User>
<DisplayName><?=$displayname;?></DisplayName> <DisplayName><?=htmlspecialchars($displayname, ENT_XML1 | ENT_QUOTES, 'UTF-8');?></DisplayName>
<EMailAddress><?=$email;?></EMailAddress> <EMailAddress><?=$email;?></EMailAddress>
</User> </User>
<Action> <Action>