Merge pull request #6204 from annando/escaping

[friendica.git] / mod / oexchange.php

diff --git a/mod/oexchange.php b/mod/oexchange.php
index 72577ab4ef67183fdbcbe3871159a789bba8e065..62d0bba078ef9fe00e9ddcb82a59e07bbb4f3b30 100644 (file)
--- a/mod/oexchange.php
+++ b/mod/oexchange.php
@@ -4,16 +4,18 @@
  */
 use Friendica\App;
 use Friendica\Core\L10n;
+use Friendica\Core\Renderer;
 use Friendica\Core\System;
 use Friendica\Module\Login;
 use Friendica\Util\Network;
+use Friendica\Util\Strings;
 
 function oexchange_init(App $a) {
 
        if (($a->argc > 1) && ($a->argv[1] === 'xrd')) {
-               $tpl = get_markup_template('oexchange_xrd.tpl');
+               $tpl = Renderer::getMarkupTemplate('oexchange_xrd.tpl');
 
-               $o = replace_macros($tpl, ['$base' => System::baseUrl()]);
+               $o = Renderer::replaceMacros($tpl, ['$base' => System::baseUrl()]);
                echo $o;
                killme();
        }
@@ -32,13 +34,13 @@ function oexchange_content(App $a) {
        }
 
        $url = ((x($_REQUEST,'url') && strlen($_REQUEST['url']))
-               ? urlencode(notags(trim($_REQUEST['url']))) : '');
+               ? urlencode(Strings::escapeTags(trim($_REQUEST['url']))) : '');
        $title = ((x($_REQUEST,'title') && strlen($_REQUEST['title']))
-               ? '&title=' . urlencode(notags(trim($_REQUEST['title']))) : '');
+               ? '&title=' . urlencode(Strings::escapeTags(trim($_REQUEST['title']))) : '');
        $description = ((x($_REQUEST,'description') && strlen($_REQUEST['description']))
-               ? '&description=' . urlencode(notags(trim($_REQUEST['description']))) : '');
+               ? '&description=' . urlencode(Strings::escapeTags(trim($_REQUEST['description']))) : '');
        $tags = ((x($_REQUEST,'tags') && strlen($_REQUEST['tags']))
-               ? '&tags=' . urlencode(notags(trim($_REQUEST['tags']))) : '');
+               ? '&tags=' . urlencode(Strings::escapeTags(trim($_REQUEST['tags']))) : '');
 
        $s = Network::fetchUrl(System::baseUrl() . '/parse_url?f=&url=' . $url . $title . $description . $tags);