From 1cf1772be156fddc6b6f49fcfe40faf105c404c5 Mon Sep 17 00:00:00 2001 From: Steven Wittens Date: Mon, 10 Apr 2006 19:11:25 +0000 Subject: - Missing filter_xss_admin() for user_registration_help --- modules/user.module | 2 +- modules/user/user.module | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) (limited to 'modules') diff --git a/modules/user.module b/modules/user.module index d9c5caa53..d64068b84 100644 --- a/modules/user.module +++ b/modules/user.module @@ -1146,7 +1146,7 @@ function user_register() { // Display the registration form. if (!$admin) { - $form['user_registration_help'] = array('#type' => 'markup', '#value' => variable_get('user_registration_help', '')); + $form['user_registration_help'] = array('#type' => 'markup', '#value' => filter_xss_admin(variable_get('user_registration_help', ''))); } $affiliates = user_auth_help_links(); if (!$admin && count($affiliates) > 0) { diff --git a/modules/user/user.module b/modules/user/user.module index d9c5caa53..d64068b84 100644 --- a/modules/user/user.module +++ b/modules/user/user.module @@ -1146,7 +1146,7 @@ function user_register() { // Display the registration form. if (!$admin) { - $form['user_registration_help'] = array('#type' => 'markup', '#value' => variable_get('user_registration_help', '')); + $form['user_registration_help'] = array('#type' => 'markup', '#value' => filter_xss_admin(variable_get('user_registration_help', ''))); } $affiliates = user_auth_help_links(); if (!$admin && count($affiliates) > 0) { -- cgit v1.2.3