diff options
| author | cweiske <cweiske@b3834d28-1941-0410-a4f8-b48e95affb8f> | 2010-09-26 22:06:31 +0000 |
|---|---|---|
| committer | cweiske <cweiske@b3834d28-1941-0410-a4f8-b48e95affb8f> | 2010-09-26 22:06:31 +0000 |
| commit | 8b45ba9e75a5d911906e95c3980e214eff9e61b0 (patch) | |
| tree | cf355fefe071c3c1a482bf4c4d1169bb1697521d /data/templates/top.inc.php | |
| parent | fbf28d0753338c23eaa2f44fd449911ef5bf1965 (diff) | |
| download | semanticscuttle-8b45ba9e75a5d911906e95c3980e214eff9e61b0.tar.gz semanticscuttle-8b45ba9e75a5d911906e95c3980e214eff9e61b0.tar.bz2 | |
escape the installation name; html code was broken when one had quotes in the name
git-svn-id: https://semanticscuttle.svn.sourceforge.net/svnroot/semanticscuttle/trunk@750 b3834d28-1941-0410-a4f8-b48e95affb8f
Diffstat (limited to 'data/templates/top.inc.php')
| -rw-r--r-- | data/templates/top.inc.php | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/data/templates/top.inc.php b/data/templates/top.inc.php index 830da65..b1ffa14 100644 --- a/data/templates/top.inc.php +++ b/data/templates/top.inc.php @@ -5,15 +5,18 @@ <title><?php echo filter($GLOBALS['sitename'] .(isset($pagetitle) ? ' ยป ' . $pagetitle : '')); ?></title> <link rel="icon" type="image/png" href="<?php echo ROOT ?>icon.png" /> <link rel="stylesheet" type="text/css" href="<?php echo ROOT ?>scuttle.css" /> - <link rel="search" type="application/opensearchdescription+xml" href="<?php echo ROOT ?>api/opensearch.php" title="<?php echo $GLOBALS['sitename'] ?>"/> + <link rel="search" type="application/opensearchdescription+xml" href="<?php echo ROOT ?>api/opensearch.php" title="<?php echo htmlspecialchars($GLOBALS['sitename']) ?>"/> <?php -if(isset($rsschannels)) { +if (isset($rsschannels)) { $size = count($rsschannels); for ($i = 0; $i < $size; $i++) { - echo ' <link rel="alternate" type="application/rss+xml" title="'. $rsschannels[$i][0] .'" href="'. $rsschannels[$i][1] .'" />'; + echo ' <link rel="alternate" type="application/rss+xml" title="' + . htmlspecialchars($rsschannels[$i][0]) . '"' + . ' href="'. $rsschannels[$i][1] .'" />'; } } ?> + <link rel="stylesheet" type="text/css" href="http://ajax.googleapis.com/ajax/libs/dojo/1.2/dijit/themes/nihilo/nihilo.css" /> |