mirror of
https://github.com/Piwigo/Piwigo.git
synced 2025-04-27 19:59:56 +03:00
- improve : add some htmlentities() to clean category names and descripion. Still more to do.
git-svn-id: http://piwigo.org/svn/trunk@1259 68402e56-0260-453c-a942-63ccdbb3a9ee
This commit is contained in:
parent
5ee3924189
commit
456b2bda5a
2 changed files with 7 additions and 7 deletions
|
@ -450,7 +450,7 @@ function get_html_menu_category($categories)
|
|||
{
|
||||
$menu.= ' rel="up"';
|
||||
}
|
||||
$menu.= '>'.$category['name'].'</a>';
|
||||
$menu.= '>'.htmlentities($category['name'],ENT_QUOTES).'</a>';
|
||||
|
||||
if ($category['nb_images'] > 0)
|
||||
{
|
||||
|
@ -500,7 +500,7 @@ function parse_comment_content($content)
|
|||
$replacement = '<span style="font-style:italic;">$1$2</span>';
|
||||
$content = preg_replace($pattern, $replacement, $content);
|
||||
|
||||
$content = '<div>'.$content.'</div>';
|
||||
$content = '<div>'.htmlentities($content,ENT_QUOTES).'</div>';
|
||||
return $content;
|
||||
}
|
||||
|
||||
|
@ -550,7 +550,7 @@ function get_html_tag_selection(
|
|||
|
||||
$output.=
|
||||
' />'
|
||||
.' '.$tag['name']
|
||||
.' '. htmlentities($tag['name'],ENT_QUOTES)
|
||||
.'</label>'
|
||||
.'</li>'
|
||||
."\n"
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue