diff options
| author | Dries Buytaert <dries@buytaert.net> | 2009-06-13 19:34:57 +0000 |
|---|---|---|
| committer | Dries Buytaert <dries@buytaert.net> | 2009-06-13 19:34:57 +0000 |
| commit | 2c942561e21bb5311731cfc767dc4670d98af74f (patch) | |
| tree | e1164056c929bc96d5bcbde77b37ca2ea9b22cf3 /includes | |
| parent | ab158d82f05b9955d156abd83272a84e433cc65d (diff) | |
| download | brdo-2c942561e21bb5311731cfc767dc4670d98af74f.tar.gz brdo-2c942561e21bb5311731cfc767dc4670d98af74f.tar.bz2 | |
- Patch #461938 by jamesAn: proper filtering of and .
Diffstat (limited to 'includes')
| -rw-r--r-- | includes/theme.inc | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/includes/theme.inc b/includes/theme.inc index a723e6fe3..59561c560 100644 --- a/includes/theme.inc +++ b/includes/theme.inc @@ -1958,8 +1958,8 @@ function template_preprocess_page(&$variables) { $variables['main_menu'] = theme_get_setting('toggle_main_menu') ? menu_main_menu() : array(); $variables['secondary_menu'] = theme_get_setting('toggle_secondary_menu') ? menu_secondary_menu() : array(); $variables['search_box'] = (theme_get_setting('toggle_search') ? drupal_render(drupal_get_form('search_theme_form')) : ''); - $variables['site_name'] = (theme_get_setting('toggle_name') ? variable_get('site_name', 'Drupal') : ''); - $variables['site_slogan'] = (theme_get_setting('toggle_slogan') ? variable_get('site_slogan', '') : ''); + $variables['site_name'] = (theme_get_setting('toggle_name') ? filter_xss_admin(variable_get('site_name', 'Drupal')) : ''); + $variables['site_slogan'] = (theme_get_setting('toggle_slogan') ? filter_xss_admin(variable_get('site_slogan', '')) : ''); $variables['css'] = drupal_add_css(); $variables['styles'] = drupal_get_css(); $variables['scripts'] = drupal_get_js(); |