Merge pull request #14 from nonz250/update-sample

update: サンプルコードを更新。
nonz250 · Nov 2, 2023 · 1c65664 · 1c65664
2 parents d1893df + e4115de
commit 1c65664
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 10 deletions.
diff --git a/sample/public/application_token.php b/sample/public/application_token.php
@@ -21,8 +21,8 @@
         'scope' => ['pos.products:read', 'pos.customers:read'],
     ]);
 
-    echo $accessToken->getToken();
+    echo htmlspecialchars($accessToken->getToken());
 } catch (Throwable $e) {
-    echo $e->getMessage();
+    echo htmlspecialchars($e->getMessage());
     exit();
 }
diff --git a/sample/public/callback.php b/sample/public/callback.php
@@ -15,14 +15,14 @@
 
     if ($error) {
         throw new RuntimeException(implode('<br>', [
-            htmlspecialchars('error: ' . ($_GET['error'] ?? '')),
-            htmlspecialchars('error_description: ' . ($_GET['error_description'] ?? '')),
-            htmlspecialchars('hint: ' . ($_GET['hint'] ?? '')),
-            htmlspecialchars('message: ' . ($_GET['message'] ?? '')),
+            'error: ' . ($_GET['error'] ?? ''),
+            'error_description: ' . ($_GET['error_description'] ?? ''),
+            'hint: ' . ($_GET['hint'] ?? ''),
+            'message: ' . ($_GET['message'] ?? ''),
         ]));
     }
 } catch (Throwable $e) {
-    echo $e->getMessage();
+    echo htmlspecialchars($e->getMessage());
     exit();
 }
 
@@ -38,7 +38,7 @@
         throw new RuntimeException('Invalid state.');
     }
 } catch (Throwable $e) {
-    echo $e->getMessage();
+    echo htmlspecialchars($e->getMessage());
     exit();
 }
 
@@ -59,12 +59,12 @@
 
     $resourceOwner = $provider->getResourceOwner($accessToken);
 
-    echo var_export($resourceOwner->toArray(), true);
+    echo htmlspecialchars(var_export($resourceOwner->toArray(), true));
 
     $accessToken = $provider->getAccessToken('refresh_token', [
         'refresh_token' => $accessToken->getRefreshToken(),
     ]);
 } catch (Throwable $e) {
-    echo $e->getMessage();
+    echo htmlspecialchars($e->getMessage());
     exit();
 }