X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=lib%2Fpeopletagswidget.php;h=31c279cbff6850bb5d9469bc28c84abaa96760b5;hb=f134a423f6a9e7bb61d069c4d6281c05417bbd45;hp=1da153c85f2d40206ff63d3b1edd64b0015ae10e;hpb=2b58d6b774e329a71b8e9b7462c1ae81b70c98ca;p=quix0rs-gnu-social.git

diff --git a/lib/peopletagswidget.php b/lib/peopletagswidget.php
index 1da153c85f..31c279cbff 100644
--- a/lib/peopletagswidget.php
+++ b/lib/peopletagswidget.php
@@ -103,8 +103,8 @@ class PeopletagsWidget extends Widget
             $this->out->elementStart('li', 'hashptag mode-' . $mode);
             // Avoid space by using raw output.
             $pt = '<span class="mark_hash">#</span><a rel="tag" href="' .
-              $this->url($this->tag->tag) .
-              '">' . $this->tag->tag . '</a>';
+              htmlspecialchars($this->url()) .
+              '">' . htmlspecialchars($this->tag->tag) . '</a>';
             $this->out->raw($pt);
             $this->out->elementEnd('li');
         }