changeset 23625:7e2673925be6

On MSN, escape the password since it's in an XML document. Didn't escape the username because it should be an email address, that hopefully wouldn't require it.
author Elliott Sales de Andrade <qulogic@pidgin.im>
date Fri, 01 Aug 2008 02:02:07 +0000
parents f5e614bc6606
children 96e78c0fa32b
files libpurple/protocols/msn/nexus.c
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/libpurple/protocols/msn/nexus.c	Tue Jul 29 23:51:06 2008 +0000
+++ b/libpurple/protocols/msn/nexus.c	Fri Aug 01 02:02:07 2008 +0000
@@ -390,7 +390,7 @@
 	msn_session_set_login_step(session, MSN_LOGIN_STEP_GET_COOKIE);
 
 	username = purple_account_get_username(session->account);
-	password = g_strndup(purple_connection_get_password(session->account->gc), 16);
+	password = g_markup_escape_text(purple_connection_get_password(session->account->gc), 16);
 
 	purple_debug_info("msn", "Logging on %s, with policy '%s', nonce '%s'\n",
 	                  username, nexus->policy, nexus->nonce);