privacy violation

Author: Billy Clark

themes/material/core/loginuserpass.php

@@ -88,23 +88,23 @@ function onRecaptchaLoad() {
                 </div>
 
                 <?php
-                $errorCode = htmlentities($this->data['errorcode'] ?? null);
+                $errorCode = $this->data['errorcode'] ?? null;
                 if ($errorCode == 'WRONGUSERPASS') {
                     $errorMessageKey = $this->data['errorparams'][1] ?? '{material:login:error_wronguserpass}';
                     $errorMessageTokens = $this->data['errorparams'][2] ?? null;
 
-                    $message = htmlentities($this->t($errorMessageKey, $errorMessageTokens));
+                    $message = $this->t($errorMessageKey, $errorMessageTokens);
                 ?>
                 <p class="mdl-color-text--red error">
                     <i class="material-icons">error</i>
 
                     <span class="mdl-textfield mdl-typography--caption">
-                        <?= $message ?>
+                        <?= htmlentities($message) ?>
                     </span>
                 </p>
 
                 <script>
-                    ga('send','event','error','<?= $errorCode ?>','<?= $username ?>','<?= $message ?>');
+                    ga('send','event','error',<?= json_encode($errorCode) ?>,'message',<?= json_encode($message) ?>);
                 </script>
                 <?php
                 }