diff options
Diffstat (limited to 'modules')
| -rw-r--r-- | modules/user.module | 2 | ||||
| -rw-r--r-- | modules/user/user.module | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/modules/user.module b/modules/user.module index d9c5caa53..d64068b84 100644 --- a/modules/user.module +++ b/modules/user.module @@ -1146,7 +1146,7 @@ function user_register() { // Display the registration form. if (!$admin) { - $form['user_registration_help'] = array('#type' => 'markup', '#value' => variable_get('user_registration_help', '')); + $form['user_registration_help'] = array('#type' => 'markup', '#value' => filter_xss_admin(variable_get('user_registration_help', ''))); } $affiliates = user_auth_help_links(); if (!$admin && count($affiliates) > 0) { diff --git a/modules/user/user.module b/modules/user/user.module index d9c5caa53..d64068b84 100644 --- a/modules/user/user.module +++ b/modules/user/user.module @@ -1146,7 +1146,7 @@ function user_register() { // Display the registration form. if (!$admin) { - $form['user_registration_help'] = array('#type' => 'markup', '#value' => variable_get('user_registration_help', '')); + $form['user_registration_help'] = array('#type' => 'markup', '#value' => filter_xss_admin(variable_get('user_registration_help', ''))); } $affiliates = user_auth_help_links(); if (!$admin && count($affiliates) > 0) { |