Changeset 2974:d0d25c20f355 for admin

Timestamp:

03/25/15 08:45:57 (10 years ago)

Author:

Dsls

Branch:

2.7

Children:

2975:2833f573a998, 2976:04a121a3fb3c

Message:

Fixed SecPod? 1055, post_title escaped correctly now.

File:

• admin/post.php (modified) (1 diff)

admin/post.php

@@ -447 +447 @@
 
 if ($post_id && $post->post_status == 1) {
-     echo '<p><a class="onblog_link outgoing" href="'.$post->getURL().'" title="'.$post_title.'">'.__('Go to this entry on the site').' <img src="images/outgoing-blue.png" alt="" /></a></p>';
+     echo '<p><a class="onblog_link outgoing" href="'.$post->getURL().'" title="'.html::escapeHTML($post_title).'">'.__('Go to this entry on the site').' <img src="images/outgoing-blue.png" alt="" /></a></p>';
 }
 if ($post_id)