From df4226866779f75eacab7f62da36b22dc21d5e44 Mon Sep 17 00:00:00 2001
From: cash <cash@36083f99-b078-4883-b0ff-0f9b5a30f544>
Date: Sun, 22 Aug 2010 23:42:26 +0000
Subject: Merged r6812:6837 from 1.7 branch to trunk (skipping some changes to
 plugins like groups and wire)

git-svn-id: http://code.elgg.org/elgg/trunk@6851 36083f99-b078-4883-b0ff-0f9b5a30f544
---
 mod/embed/views/default/object/default/embed.php | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

(limited to 'mod/embed/views/default/object')

diff --git a/mod/embed/views/default/object/default/embed.php b/mod/embed/views/default/object/default/embed.php
index 6f698a157..aca2ceea1 100644
--- a/mod/embed/views/default/object/default/embed.php
+++ b/mod/embed/views/default/object/default/embed.php
@@ -1,5 +1,6 @@
 <?php
-	if ($vars['entity'] instanceof ElggObject) {
-		echo '<a href="'. $vars['entity']->getURL() .'">' . $vars['entity']->title . '</a>';
-	}
-?>
\ No newline at end of file
+
+if ($vars['entity'] instanceof ElggObject) {
+	$title = htmlspecialchars($vars['entity']->title, ENT_QUOTES);
+	echo "<a href=\"{$vars['entity']->getURL()}\">$title</a>";
+}
-- 
cgit v1.2.3