X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=lib%2Fpeopletagswidget.php;h=31c279cbff6850bb5d9469bc28c84abaa96760b5;hb=b4271a3533bdf12329f27dd75452c1ef2a6ee3d1;hp=1da153c85f2d40206ff63d3b1edd64b0015ae10e;hpb=51ecd6be15098c1e8ac8701f846c22f9f630d5c0;p=quix0rs-gnu-social.git

diff --git a/lib/peopletagswidget.php b/lib/peopletagswidget.php
index 1da153c85f..31c279cbff 100644
--- a/lib/peopletagswidget.php
+++ b/lib/peopletagswidget.php
@@ -103,8 +103,8 @@ class PeopletagsWidget extends Widget
             $this->out->elementStart('li', 'hashptag mode-' . $mode);
             // Avoid space by using raw output.
             $pt = '<span class="mark_hash">#</span><a rel="tag" href="' .
-              $this->url($this->tag->tag) .
-              '">' . $this->tag->tag . '</a>';
+              htmlspecialchars($this->url()) .
+              '">' . htmlspecialchars($this->tag->tag) . '</a>';
             $this->out->raw($pt);
             $this->out->elementEnd('li');
         }