1 files changed, 1 insertions, 1 deletions

diff --git a/src/controller/password.php b/src/controller/password.php
index 66a617a..074ffb1 100644
--- a/src/controller/password.php
+++ b/src/controller/password.php
@@ -155,7 +155,7 @@ function connect(LoginBuilder $builder, EntityManager $entityManager)
         else // c'est OK
         {
                 $login = $_POST['login'];
-                $password = $_POST['password'];
+                $password = htmlspecialchars($_POST['password']);
                 $user = getUser($login, $entityManager);
 
                 // enregistrement et redirection