From 5154c3aca4c9362cbd0fb236e0ea9dd5c7c0aa78 Mon Sep 17 00:00:00 2001
From: Steven Wittens <steven@10.no-reply.drupal.org>
Date: Wed, 18 May 2005 21:12:17 +0000
Subject: - Fixing some plain/url check calls.

---
 modules/upload/upload.module | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'modules/upload/upload.module')

diff --git a/modules/upload/upload.module b/modules/upload/upload.module
index 5302d5ac3..c0c7c6b86 100644
--- a/modules/upload/upload.module
+++ b/modules/upload/upload.module
@@ -247,7 +247,7 @@ function upload_nodeapi(&$node, $op, $arg) {
         foreach ($node->files as $file) {
           if ($file->list) {
             $rows[] = array(
-              '<a href="'. ($file->fid ? file_create_url($file->filepath) : url(file_create_filename($file->filename, file_create_path()))) . '">'. $file->filename .'</a>',
+              '<a href="'. check_url(($file->fid ? file_create_url($file->filepath) : url(file_create_filename($file->filename, file_create_path())))) .'">'. check_plain($file->filename) .'</a>',
               format_size($file->filesize)
             );
             // We save the list of files still in preview for later
-- 
cgit v1.2.3