banananetwork
/
tt-rss
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

properly escape comment links

Browse Source
master
Andrew Dolgov 12 years ago
parent 5c56897349
commit 6e577ba157
2 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File

6
classes/feeds.php
Unescape Escape View File

@ -633,14 +633,14 @@ class Feeds extends Handler_Protected {
if ($num_comments > 0) {
if ($line["comments"]) {
$comments_url = $line["comments"];
$comments_url = htmlspecialchars($line["comments"]);
} else {
$comments_url = $line["link"];
$comments_url = htmlspecialchars($line["link"]);
}
$entry_comments = "<a target='_blank' href=\"$comments_url\">$num_comments comments</a>";
} else {
if ($line["comments"] && $line["link"] != $line["comments"]) {
$entry_comments = "<a target='_blank' href=\"".$line["comments"]."\">comments</a>";
$entry_comments = "<a target='_blank' href=\"".htmlspecialchars($line["comments"])."\">comments</a>";
}
}

6
include/functions.php
Unescape Escape View File

@ -3352,14 +3352,14 @@
if ($num_comments > 0) {
if ($line["comments"]) {
$comments_url = $line["comments"];
$comments_url = htmlspecialchars($line["comments"]);
} else {
$comments_url = $line["link"];
$comments_url = htmlspecialchars($line["link"]);
}
$entry_comments = "<a target='_blank' href=\"$comments_url\">$num_comments comments</a>";
} else {
if ($line["comments"] && $line["link"] != $line["comments"]) {
$entry_comments = "<a target='_blank' href=\"".$line["comments"]."\">comments</a>";
$entry_comments = "<a target='_blank' href=\"".htmlspecialchars($line["comments"])."\">comments</a>";
}
}

Write Preview
Loading…
Cancel
Save