Escape error content displayed when subscribing fails (as it might contain HTML).

2025-06-17 17:59:10 +00:00
parent ef1f3cbcef
commit 5b0d325733
2 changed files with 2 additions and 2 deletions
--- a/classes/Feeds.php
+++ b/classes/Feeds.php
@@ -1035,7 +1035,7 @@ class Feeds extends Handler_Protected {
 				UrlHelper::$fetch_last_error .= " (feed behind Cloudflare)";
 			}

-			return array("code" => 5, "message" => UrlHelper::$fetch_last_error);
+			return array("code" => 5, "message" => truncate_string(UrlHelper::$fetch_last_error, 1000, '…'));
 		}

 		if (str_contains(UrlHelper::$fetch_last_content_type, "html") && self::_is_html($contents)) {