Update of /cvsroot/php-blog/serendipity
In directory sc8-pr-cvs1:/tmp/cvs-serv17810
Modified Files:
index.php
Log Message:
Fixed bug 719016 - entry-title does not escape correctly
Index: index.php
===================================================================
RCS file: /cvsroot/php-blog/serendipity/index.php,v
retrieving revision 1.4
retrieving revision 1.5
diff -u -d -r1.4 -r1.5
--- index.php 7 Apr 2003 05:37:38 -0000 1.4
+++ index.php 28 Apr 2003 17:53:58 -0000 1.5
@@ -44,7 +44,7 @@
'WHERE id=' . serendipity_db_escape_string($id), true);
$title = $title[0];
- $serendipity['blogSubTitle'] = $title;
+ $serendipity['blogSubTitle'] = htmlspecialchars($title);
ob_start();
include_once("serendipity_genpage.inc.php");
|