aboutsummaryrefslogtreecommitdiff
path: root/mod/pages/actions
diff options
context:
space:
mode:
authorSteve Clay <steve@mrclay.org>2012-09-09 01:52:09 -0400
committerSteve Clay <steve@mrclay.org>2012-10-10 21:01:56 -0400
commit5efa9426d40326b8d31c152dd2a433076b490308 (patch)
treed94abfb8194e126fbebcbf50b751f9e796e9a9a7 /mod/pages/actions
parent9ccbd106a87a1742a61cc4df0e9ead921046772a (diff)
downloadelgg-5efa9426d40326b8d31c152dd2a433076b490308.tar.gz
elgg-5efa9426d40326b8d31c152dd2a433076b490308.tar.bz2
Fixes #4593: All titles are HTML-escaped plain text
Diffstat (limited to 'mod/pages/actions')
-rw-r--r--mod/pages/actions/pages/edit.php5
1 files changed, 3 insertions, 2 deletions
diff --git a/mod/pages/actions/pages/edit.php b/mod/pages/actions/pages/edit.php
index a32e4a4ba..fe5754d76 100644
--- a/mod/pages/actions/pages/edit.php
+++ b/mod/pages/actions/pages/edit.php
@@ -8,9 +8,10 @@
$variables = elgg_get_config('pages');
$input = array();
foreach ($variables as $name => $type) {
- $input[$name] = get_input($name);
if ($name == 'title') {
- $input[$name] = strip_tags($input[$name]);
+ $input[$name] = htmlspecialchars(get_input($name, '', false), ENT_QUOTES, 'UTF-8');
+ } else {
+ $input[$name] = get_input($name);
}
if ($type == 'tags') {
$input[$name] = string_to_tag_array($input[$name]);