SelftagWidget had mismatching url() definition

diff --git a/lib/peopletagswidget.php b/lib/peopletagswidget.php
index 1da153c85f2d40206ff63d3b1edd64b0015ae10e..31c279cbff6850bb5d9469bc28c84abaa96760b5 100644 (file)
--- a/lib/peopletagswidget.php
+++ b/lib/peopletagswidget.php
@@ -103,8 +103,8 @@ class PeopletagsWidget extends Widget
             $this->out->elementStart('li', 'hashptag mode-' . $mode);
             // Avoid space by using raw output.
             $pt = '<span class="mark_hash">#</span><a rel="tag" href="' .
-              $this->url($this->tag->tag) .
-              '">' . $this->tag->tag . '</a>';
+              htmlspecialchars($this->url()) .
+              '">' . htmlspecialchars($this->tag->tag) . '</a>';
             $this->out->raw($pt);
             $this->out->elementEnd('li');
         }

diff --git a/lib/selftagswidget.php b/lib/selftagswidget.php
index e2530769dfc67bfb68f1f681f461dfd8c0fd4a83..aff4544c0d81f8633d3ef426d7a9a426362b38e4 100644 (file)
--- a/lib/selftagswidget.php
+++ b/lib/selftagswidget.php
@@ -29,10 +29,10 @@ if (!defined('GNUSOCIAL')) { exit(1); }
 
 class SelftagsWidget extends PeopletagsWidget
 {
-    function url($tag)
+    public function url()
     {
         // link to self tag page
-        return common_local_url('selftag', array('tag' => $tag));
+        return common_local_url('selftag', array('tag' => $this->tag->tag));
     }
 
     function label()