From 5c4d6c622f2ee0b6a2d764079dd4ffda3cd9b5d2 Mon Sep 17 00:00:00 2001
From: Luffy <52o@qq52o.cn>
Date: Mon, 8 Sep 2025 10:22:48 +0800
Subject: [PATCH]  sanitize request URI for GPG keys link

---
 include/version.inc | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/include/version.inc b/include/version.inc
index bcc8949930..8997441a73 100644
--- a/include/version.inc
+++ b/include/version.inc
@@ -114,6 +114,8 @@ function show_source_releases()
 
     $SHOW_COUNT = 4;
 
+    $current_uri = htmlspecialchars($_SERVER['REQUEST_URI'], ENT_QUOTES, 'UTF-8');
+
     $i = 0; foreach ($RELEASES as $MAJOR => $major_releases): /* major releases loop start */
         $releases = array_slice($major_releases, 0, $SHOW_COUNT);
 ?>
@@ -153,7 +155,7 @@ function show_source_releases()
               </li>
             </ul>
 
-            <a href="<?php echo $_SERVER['REQUEST_URI']; ?>#gpg-<?php echo $mver; ?>">GPG Keys for PHP <?php echo $mver; ?></a>
+            <a href="<?php echo $current_uri; ?>#gpg-<?php echo $mver; ?>">GPG Keys for PHP <?php echo $mver; ?></a>
           </div>
         <?php endforeach; ?>
     <?php endforeach; /* major releases loop end */ ?>