From: Andrew Dolgov <fox@bah.spb.su>
Date: Sat, 17 May 2008 09:22:08 +0000 (+0100)
Subject: vf_catchup_link: use onclick, instead of href
X-Git-Tag: 1.2.23-final~92
X-Git-Url: https://git.wh0rd.org/?a=commitdiff_plain;h=962d8ba4e147e54158b7fa8b446b03636408f103;p=tt-rss.git

vf_catchup_link: use onclick, instead of href
---

diff --git a/functions.php b/functions.php
index d01c31d5..f8d80671 100644
--- a/functions.php
+++ b/functions.php
@@ -4934,8 +4934,9 @@
 							$cur_feed_title = $line["feed_title"];
 							$vgroup_last_feed = $feed_id;
 
+							$cur_feed_title = htmlspecialchars($cur_feed_title);
 
-							$vf_catchup_link = "(<a href='javascript:catchupFeedInGroup($feed_id, \"$cur_feed_title\")'>mark as read</a>)";
+							$vf_catchup_link = "(<a onclick='javascript:catchupFeedInGroup($feed_id, \"$cur_feed_title\");' href='#'>mark as read</a>)";
 
 							print "<tr class='feedTitle'><td colspan='7'>".
 								"<a href=\"javascript:viewfeed($feed_id, '', false)\">".
@@ -5006,7 +5007,9 @@
 							$cur_feed_title = $line["feed_title"];
 							$vgroup_last_feed = $feed_id;
 
-							$vf_catchup_link = "(<a href='javascript:catchupFeedInGroup($feed_id, \"$cur_feed_title\")'>mark as read</a>)";
+							$cur_feed_title = htmlspecialchars($cur_feed_title);
+
+							$vf_catchup_link = "(<a onclick='javascript:catchupFeedInGroup($feed_id, \"$cur_feed_title\");' href='#'>mark as read</a>)";
 
 							print "<div class='cdmFeedTitle'>".
 								"<a href=\"javascript:viewfeed($feed_id, '', false)\">".