From: Andrew Dolgov <fox@bah.spb.su>
Date: Sat, 19 May 2007 16:28:10 +0000 (+0100)
Subject: escape quotes in tag cloud
X-Git-Tag: 1.2.11~4
X-Git-Url: https://git.wh0rd.org/?a=commitdiff_plain;h=546ffab4aae87668cade54be9132bc39e35d5670;p=tt-rss.git

escape quotes in tag cloud
---

diff --git a/functions.php b/functions.php
index ba4b0234..c8873a05 100644
--- a/functions.php
+++ b/functions.php
@@ -3966,8 +3966,10 @@
 			// multiply by the font-size increment ($size)
 			// and add the $min_size set above
 			$size = round($min_size + (($value - $min_qty) * $step));
-		   
-			echo "<a href=\"javascript:viewfeed('$key') \" style=\"font-size: " . 
+
+			$key_escaped = str_replace("'", "\\'", $key);
+
+			echo "<a href=\"javascript:viewfeed('$key_escaped') \" style=\"font-size: " . 
 				$size . "px\" title=\"$value articles tagged with " . 
 				$key . '">' . $key . '</a> ';
 		}