Escape quotes in bookmarklet confirm message

diff --git a/classes/pref_feeds.php b/classes/pref_feeds.php
index db1161c35ef2f4212b0cb0afa594dad0f2c750b6..61eeb598b439810ad9c0a840a7f8a9d59bd7cda0 100644 (file)
--- a/classes/pref_feeds.php
+++ b/classes/pref_feeds.php
@@ -1501,7 +1501,7 @@ class Pref_Feeds extends Protected_Handler {
 
                $bm_subscribe_url = str_replace('%s', '', add_feed_url());
 
-               $confirm_str = __('Subscribe to %s in Tiny Tiny RSS?');
+               $confirm_str = str_replace("'", "\'", __('Subscribe to %s in Tiny Tiny RSS?'));
 
                $bm_url = htmlspecialchars("javascript:{if(confirm('$confirm_str'.replace('%s',window.location.href)))window.location.href='$bm_subscribe_url'+window.location.href}");