diff options
| author | Steve Clay <steve@mrclay.org> | 2012-10-10 18:22:31 -0700 |
|---|---|---|
| committer | Steve Clay <steve@mrclay.org> | 2012-10-10 18:22:31 -0700 |
| commit | d134beadb79fcc90a75bda8bbcbfb9987b27470c (patch) | |
| tree | 3228eb49db250d8d1a5a0b36eb58c7051b4d8bbb /mod/pages | |
| parent | ec68ded7bc64e64d27f9c78efdfa6a7d3d25d14e (diff) | |
| parent | 5efa9426d40326b8d31c152dd2a433076b490308 (diff) | |
| download | elgg-d134beadb79fcc90a75bda8bbcbfb9987b27470c.tar.gz elgg-d134beadb79fcc90a75bda8bbcbfb9987b27470c.tar.bz2 | |
Merge pull request #381 from mrclay/4593-plaintext-titles
Fixes #4593: All titles are HTML-escaped plain text
Diffstat (limited to 'mod/pages')
| -rw-r--r-- | mod/pages/actions/pages/edit.php | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/mod/pages/actions/pages/edit.php b/mod/pages/actions/pages/edit.php index a32e4a4ba..fe5754d76 100644 --- a/mod/pages/actions/pages/edit.php +++ b/mod/pages/actions/pages/edit.php @@ -8,9 +8,10 @@ $variables = elgg_get_config('pages'); $input = array(); foreach ($variables as $name => $type) { - $input[$name] = get_input($name); if ($name == 'title') { - $input[$name] = strip_tags($input[$name]); + $input[$name] = htmlspecialchars(get_input($name, '', false), ENT_QUOTES, 'UTF-8'); + } else { + $input[$name] = get_input($name); } if ($type == 'tags') { $input[$name] = string_to_tag_array($input[$name]); |