summaryrefslogtreecommitdiff
path: root/dev-lang/mono/files/mono-2.10.9-CVE-2012-3382.patch
blob: 434adf283d994b85e47b9d3eb309d80e5f0e6f06 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
diff --git a/mcs/class/System.Web/System.Web/HttpForbiddenHandler.cs b/mcs/class/System.Web/System.Web/HttpForbiddenHandler.cs
index af5ddf4..7e87d48 100644
--- a/mcs/class/System.Web/System.Web/HttpForbiddenHandler.cs
+++ b/mcs/class/System.Web/System.Web/HttpForbiddenHandler.cs
@@ -42,7 +42,7 @@ public void ProcessRequest (HttpContext context)
 				
 			throw new HttpException (403,
 						 "This type of page is not served.",
-						 req != null ? req.Path : null,
+						 req != null ? HttpUtility.HtmlEncode (req.Path) : null,
 						 description);
 		}