X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=bin%2Fmozilla%2Flogin.pl;h=92fa25db39d1f2333d0dcb742363bb47aa0fa34b;hb=1c603341fc02e3a5a7b5126cd7df6478d2e34700;hp=22c37bf851396ae25192388166a04a6fa2a68f62;hpb=e0201a3f8f11b3a32f76b0c89eebb475e4798eca;p=kivitendo-erp.git

diff --git a/bin/mozilla/login.pl b/bin/mozilla/login.pl
index 22c37bf85..92fa25db3 100644
--- a/bin/mozilla/login.pl
+++ b/bin/mozilla/login.pl
@@ -144,7 +144,7 @@ sub login {
   my $menu_script = $style_to_script_map{$user->{menustyle}} || '';
 
   # made it this far, execute the menu
-  $form->{callback} = build_std_url("script=menu${menu_script}.pl", 'action=display');
+  $form->{callback} = build_std_url("script=menu${menu_script}.pl", 'action=display', "callback=" . $form->escape($form->{callback}));
 
   $auth->set_cookie_environment_variable();