From: Federico Marani Date: Sat, 7 Mar 2009 13:47:46 +0000 (+0000) Subject: html escape of atom attributes (ticket 1266) X-Git-Url: https://git.mxchange.org/?a=commitdiff_plain;h=80d0423026b0bc14c8da820fff7905ba9c0a5d0e;p=quix0rs-gnu-social.git html escape of atom attributes (ticket 1266) --- diff --git a/lib/jabber.php b/lib/jabber.php index f41d984d62..4a96fb54e6 100644 --- a/lib/jabber.php +++ b/lib/jabber.php @@ -176,14 +176,14 @@ function jabber_format_entry($profile, $notice) $entry .= "\n"; $entry .= "" . $profile->nickname . " - " . common_config('site', 'name') . "\n"; $entry .= "\n"; - $entry .= "\n"; + $entry .= "\n"; $entry .= "" . $profile->nickname . "\n"; $entry .= "" . $profile->avatarUrl(AVATAR_PROFILE_SIZE) . "\n"; $entry .= "\n"; $entry .= "" . htmlspecialchars($msg) . "\n"; $entry .= "" . htmlspecialchars($msg) . "\n"; - $entry .= "\n"; - $entry .= "". $notice->uri . "\n"; + $entry .= "\n"; + $entry .= "". htmlspecialchars($notice->uri) . "\n"; $entry .= "".common_date_w3dtf($notice->created)."\n"; $entry .= "".common_date_w3dtf($notice->modified)."\n"; $entry .= "\n";