cvs: pearweb /public_html/pepr pepr-proposal-show.php
| From: | Tobias Schlitt | Date: | Fri, 14 May 2004 23:26:31 +0000 |
| Subject: | cvs: pearweb /public_html/pepr pepr-proposal-show.php | ||
| Groups: | php.pear.cvs | ||
| Request: | Send a blank email to pear-cvs+get-19494@lists.php.net to get a copy of this message | ||
toby Fri May 14 19:26:31 2004 EDT
Modified files:
/pearweb/public_html/pepr pepr-proposal-show.php
Log:
* Escape HTML entities.
http://cvs.php.net/diff.php/pearweb/public_html/pepr/pepr-proposal-show.php?r1=1.27&r2=1.28&ty=u
Index: pearweb/public_html/pepr/pepr-proposal-show.php
diff -u pearweb/public_html/pepr/pepr-proposal-show.php:1.27
pearweb/public_html/pepr/pepr-proposal-show.php:1.28
--- pearweb/public_html/pepr/pepr-proposal-show.php:1.27 Wed May 12 13:00:44 2004
+++ pearweb/public_html/pepr/pepr-proposal-show.php Fri May 14 19:26:30 2004
@@ -16,7 +16,7 @@
+----------------------------------------------------------------------+
| Authors: Tobias Schlitt <toby@php.net> |
+----------------------------------------------------------------------+
- $Id: pepr-proposal-show.php,v 1.27 2004/05/12 17:00:44 mj Exp $
+ $Id: pepr-proposal-show.php,v 1.28 2004/05/14 23:26:30 toby Exp $
*/
require_once 'pepr/pepr.php';
@@ -132,7 +132,7 @@
}
$bb->horizHeadRow('Proposer:', user_link($proposal->user_handle));
$bbparser = new HTML_BBCodeParser(array('filters' =>
'Basic,Images,Links,Lists,Extended'));
- $bb->fullRow($bbparser->qparse(nl2br($proposal->pkg_describtion)));
+ $bb->fullRow($bbparser->qparse(nl2br(htmlentities($proposal->pkg_describtion))));
$changelog = @ppComment::getAll($proposal->id, 'package_proposal_changelog');
$changeLogRow = "";