svn: /web/php/trunk/include/ layout.inc
| From: | Rasmus Lerdorf | Date: | Thu, 19 Jan 2012 17:17:12 +0000 |
| Subject: | svn: /web/php/trunk/include/ layout.inc | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-12840@lists.php.net to get a copy of this message | ||
rasmus Thu, 19 Jan 2012 17:17:12 +0000
Revision: http://svn.php.net/viewvc?view=revision&revision=322472
Log:
Fix XSS here
Changed paths:
U web/php/trunk/include/layout.inc
Modified: web/php/trunk/include/layout.inc
===================================================================
--- web/php/trunk/include/layout.inc 2012-01-19 16:16:48 UTC (rev 322471)
+++ web/php/trunk/include/layout.inc 2012-01-19 17:17:12 UTC (rev 322472)
@@ -673,7 +673,7 @@
<?php
// Print long description
- echo preg_replace("/\r?\n\r?\n/", "<br /><br />",
trim($event['ldesc']));
+ echo preg_replace("/\r?\n\r?\n/", "<br /><br />",
trim(htmlentities($event['ldesc'],ENT_QUOTES | ENT_IGNORE, 'UTF-8')));
// If we have an URL, print it out
if ($event['url']) {
echo '<br /><br /><b>URL:</b> ',