Sending HTTP 400 if type is empty/invalid

diff --git a/wcfsetup/install/files/font/getFont.php b/wcfsetup/install/files/font/getFont.php
index 9961622c3355c4d58ebe165a48097e2833298a0e..ac9e0b96c9eec86cf6004a3d8b87b874ff665292 100644 (file)
--- a/wcfsetup/install/files/font/getFont.php
+++ b/wcfsetup/install/files/font/getFont.php
@@ -42,7 +42,9 @@ if (!empty($_GET['type'])) {
                die($data);
        }
        
-       die("Invalid type '" . $_GET['type'] . "' given");
+       header("HTTP/1.1 400 Bad Request");
+       die("Invalid type '" . htmlentities($_GET['type']) . "' given");
 }
 
+header("HTTP/1.1 400 Bad Request");
 die("Missing type parameter");