Merge pull request #34 from marcoris/maestro

Sanitize the source string
MaestroError · Feb 9, 2024 · 1d307ee · 1d307ee
2 parents 5cfd764 + 852bc21
commit 1d307ee
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/HeicToJpg.php b/src/HeicToJpg.php
@@ -316,7 +316,7 @@ public static function convert(string $source, string $converterPath = "", $forc
         return (new self)
             ->checkOS($forceArm)
             ->setConverterLocation($converterPath)
-            ->convertImage($source);
+            ->convertImage(htmlspecialchars($source));
     }
 
     public static function convertOnMac(string $source, string $arch = "amd64", string $converterPath = "")