Changeset 741:48db4c48747b for plugins/widgets/_widgets_functions.php

Timestamp:

10/06/11 10:20:53 (14 years ago)

Author:

franck <carnet.franck.paul@…>

Branch:

default

Message:

Encode URL in Feed widget output, fixes #1281

File:

• plugins/widgets/_widgets_functions.php (modified) (1 diff)

plugins/widgets/_widgets_functions.php

@@ -251 +251 @@
           $i = 0;
           foreach ($feed->items as $item) {
-               $li = isset($item->link) ? '<a href="'.$item->link.'">'.$item->title.'</a>' : $item->title;
+               $li = isset($item->link) ? '<a href="'.html::escapeHTML($item->link).'">'.$item->title.'</a>' : $item->title;
                $res .= ' <li>'.$li.'</li> ';
                $i++;