From: Hypolite Petovan <hypolite@mrpetovan.com>
Date: Tue, 9 Jun 2020 12:53:48 +0000 (-0400)
Subject: Add quote support in attachment title in ActivityPub\Processor
X-Git-Url: https://git.mxchange.org/?a=commitdiff_plain;h=fdb22320ffa9b02d7e1283c87252362e892c17ba;p=friendica.git

Add quote support in attachment title in ActivityPub\Processor
---

diff --git a/src/Protocol/ActivityPub/Processor.php b/src/Protocol/ActivityPub/Processor.php
index 0c60ca57d9..1765b47017 100644
--- a/src/Protocol/ActivityPub/Processor.php
+++ b/src/Protocol/ActivityPub/Processor.php
@@ -103,7 +103,7 @@ class Processor
 						// Additional link attachments are prepended before the existing [attachment] tag
 						$item['body'] = substr_replace($item['body'], "\n[bookmark=" . $attach['url'] . ']' . $linkTitle . "[/bookmark]\n", $existingAttachmentPos, 0);
 					} else {
-						$item['body'] .= "\n[attachment type='link' url='" . $attach['url'] . "' title='" . ($attach['title'] ?? '') . "' image='" . ($attach['image'] ?? '') . "']" . ($attach['desc'] ?? '') . '[/attachment]';
+						$item['body'] .= "\n[attachment type='link' url='" . $attach['url'] . "' title='" . htmlspecialchars($attach['title'] ?? '', ENT_QUOTES) . "' image='" . ($attach['image'] ?? '') . "']" . ($attach['desc'] ?? '') . '[/attachment]';
 					}
 					break;
 				default: