From 5efa9426d40326b8d31c152dd2a433076b490308 Mon Sep 17 00:00:00 2001 From: Steve Clay Date: Sun, 9 Sep 2012 01:52:09 -0400 Subject: Fixes #4593: All titles are HTML-escaped plain text --- mod/bookmarks/actions/bookmarks/save.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'mod/bookmarks') diff --git a/mod/bookmarks/actions/bookmarks/save.php b/mod/bookmarks/actions/bookmarks/save.php index 3ca6bef32..46090b115 100644 --- a/mod/bookmarks/actions/bookmarks/save.php +++ b/mod/bookmarks/actions/bookmarks/save.php @@ -5,7 +5,7 @@ * @package Bookmarks */ -$title = strip_tags(get_input('title')); +$title = htmlspecialchars(get_input('title', '', false), ENT_QUOTES, 'UTF-8'); $description = get_input('description'); $address = get_input('address'); $access_id = get_input('access_id'); -- cgit v1.2.3