Escape generated password in mobileconfig

Escape ampersand, less than, greater than to avoid generating invalid XML.

Fixes #7171
This commit is contained in:
Michael Kuron
2026-05-02 16:24:01 +02:00
committed by GitHub
parent 886dbcc419
commit dfc99fb265
+1 -1
View File
@@ -52,7 +52,7 @@ if (isset($_GET['app_password'])) {
else
$platform = $_SERVER['HTTP_USER_AGENT'];
$password = password_generate();
$password = htmlspecialchars(password_generate(), ENT_NOQUOTES);
$attr = array(
'app_name' => $platform,