From: Andrew Dolgov Date: Sun, 21 Oct 2012 21:19:06 +0000 (+0400) Subject: properly escape article link/PTITLEs (refs #472) X-Git-Tag: 1.6.1~73 X-Git-Url: https://git.wh0rd.org/?a=commitdiff_plain;h=5c5689734955ced9ca81690ad9c1b76b71a8712a;p=tt-rss.git properly escape article link/PTITLEs (refs #472) --- diff --git a/classes/feeds.php b/classes/feeds.php index 31224d1d..5280502c 100644 --- a/classes/feeds.php +++ b/classes/feeds.php @@ -503,7 +503,7 @@ class Feeds extends Handler_Protected { $reply['content'] .= ""; $reply['content'] .= "

" . - strip_tags($line['title']) . "

"; + htmlspecialchars(strip_tags($line['title'])) . ""; $reply['content'] .= ""; } - $title_escaped = db_escape_string($line['title']); + $title_escaped = htmlspecialchars($line['title']); $rv['content'] .= "

" . truncate_string(strip_tags($line['title']), 15) . "

"; @@ -3400,7 +3400,7 @@ $rv['content'] .= "

" . + htmlspecialchars($line["link"]) . "\">" . $line["title"] . "$entry_author

"; } else {