Use SCRIPT_NAME instead of PHP_SELF which won't send the PATH_INFO, this prevents XSS in old browsers. Thanks to Nico Golde.
Use SCRIPT_NAME instead of PHP_SELF which won't send the PATH_INFO, this prevents XSS in old browsers. Thanks to Nico Golde.

IljaN/core,nextcloud/server,lrytz/core,sharidas/core,jbicha/server,bluelml/core,lrytz/core,pollopolea/core,owncloud/core,owncloud/core,jbicha/server,pmattern/server,jbicha/server,Ardinis/server,michaelletzgus/nextcloud-server,pmattern/server,xx621998xx/server,andreas-p/nextcloud-server,endsguy/server,pollopolea/core,jbicha/server,bluelml/core,pixelipo/server,whitekiba/server,IljaN/core,Ardinis/server,owncloud/core,owncloud/core,pmattern/server,bluelml/core,xx621998xx/server,andreas-p/nextcloud-server,lrytz/core,michaelletzgus/nextcloud-server,Ardinis/server,cernbox/core,Ardinis/server,phil-davis/core,andreas-p/nextcloud-server,bluelml/core,pollopolea/core,nextcloud/server,owncloud/core,michaelletzgus/nextcloud-server,andreas-p/nextcloud-server,whitekiba/server,pixelipo/server,whitekiba/server,pixelipo/server,cernbox/core,IljaN/core,whitekiba/server,endsguy/server,sharidas/core,pollopolea/core,endsguy/server,sharidas/core,xx621998xx/server,nextcloud/server,pmattern/server,cernbox/core,lrytz/core,bluelml/core,pollopolea/core,sharidas/core,andreas-p/nextcloud-server,whitekiba/server,nextcloud/server,xx621998xx/server,xx621998xx/server,cernbox/core,Ardinis/server,pixelipo/server,IljaN/core,jbicha/server,pmattern/server,sharidas/core,lrytz/core,endsguy/server,endsguy/server,michaelletzgus/nextcloud-server,pixelipo/server,cernbox/core,IljaN/core