From a0c4b7b691d2f19be13351741f707103c6f50f0b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Viktor=20Sz=C3=A9pe?= <viktor@szepe.net>
Date: Fri, 20 Mar 2015 13:05:09 +0100
Subject: [PATCH] htmlspecialchars for single lines

I think it is a security hole.
---
 dBug.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dBug.php b/dBug.php
index 69d5dc1..622dfc3 100644
--- a/dBug.php
+++ b/dBug.php
@@ -256,7 +256,7 @@ class dBug
 		$lines=preg_split('/\R/u', $nv);
 		$linesCount=count($lines);
 		if ($linesCount==1 && $length<=static::$embeddedStringMaxLength) {
-			$this->renderPrimitiveType('string', 'string ['.$length.']', $var);
+			$this->renderPrimitiveType('string', 'string ['.$length.']', $nv);
 		} else {
 			$this->makeTableHeader('string', 'string ('.$length.' chars @ '.$linesCount.' lines)');
 			foreach ($lines as $num=>$line) {