summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSteven Wittens <steven@10.no-reply.drupal.org>2006-04-10 19:11:25 +0000
committerSteven Wittens <steven@10.no-reply.drupal.org>2006-04-10 19:11:25 +0000
commit1cf1772be156fddc6b6f49fcfe40faf105c404c5 (patch)
tree27920b0facc18f85fff517c396c2efee8f0d2a42
parentadb56690c1b16e2c87b3204cfbdcc9594a36941a (diff)
downloadbrdo-1cf1772be156fddc6b6f49fcfe40faf105c404c5.tar.gz
brdo-1cf1772be156fddc6b6f49fcfe40faf105c404c5.tar.bz2
- Missing filter_xss_admin() for user_registration_help
-rw-r--r--modules/user.module2
-rw-r--r--modules/user/user.module2
2 files changed, 2 insertions, 2 deletions
diff --git a/modules/user.module b/modules/user.module
index d9c5caa53..d64068b84 100644
--- a/modules/user.module
+++ b/modules/user.module
@@ -1146,7 +1146,7 @@ function user_register() {
// Display the registration form.
if (!$admin) {
- $form['user_registration_help'] = array('#type' => 'markup', '#value' => variable_get('user_registration_help', ''));
+ $form['user_registration_help'] = array('#type' => 'markup', '#value' => filter_xss_admin(variable_get('user_registration_help', '')));
}
$affiliates = user_auth_help_links();
if (!$admin && count($affiliates) > 0) {
diff --git a/modules/user/user.module b/modules/user/user.module
index d9c5caa53..d64068b84 100644
--- a/modules/user/user.module
+++ b/modules/user/user.module
@@ -1146,7 +1146,7 @@ function user_register() {
// Display the registration form.
if (!$admin) {
- $form['user_registration_help'] = array('#type' => 'markup', '#value' => variable_get('user_registration_help', ''));
+ $form['user_registration_help'] = array('#type' => 'markup', '#value' => filter_xss_admin(variable_get('user_registration_help', '')));
}
$affiliates = user_auth_help_links();
if (!$admin && count($affiliates) > 0) {