Escape quotes in bookmarklet confirm message

13 years ago · b1e592d37f
parent 1bd11fdf95
commit b1e592d37f
1 changed files with 1 additions and 1 deletions
--- a/classes/pref_feeds.php
+++ b/classes/pref_feeds.php
@ -1501,7 +1501,7 @@ class Pref_Feeds extends Protected_Handler {

 		$bm_subscribe_url = str_replace('%s', '', add_feed_url());

-		$confirm_str = __('Subscribe to %s in Tiny Tiny RSS?');
+		$confirm_str = str_replace("'", "\'", __('Subscribe to %s in Tiny Tiny RSS?'));

 		$bm_url = htmlspecialchars("javascript:{if(confirm('$confirm_str'.replace('%s',window.location.href)))window.location.href='$bm_subscribe_url'+window.location.href}");