diff options
| author | Dries Buytaert <dries@buytaert.net> | 2010-06-25 20:20:47 +0000 |
|---|---|---|
| committer | Dries Buytaert <dries@buytaert.net> | 2010-06-25 20:20:47 +0000 |
| commit | 0ee32d7c4ec65516d5dfce2b7bc4d77d6731b820 (patch) | |
| tree | 91b9aee0245216850bc77a414778802222612610 | |
| parent | eace4a9d9b24d3fdbe5922eb33b73befce811cfb (diff) | |
| download | brdo-0ee32d7c4ec65516d5dfce2b7bc4d77d6731b820.tar.gz brdo-0ee32d7c4ec65516d5dfce2b7bc4d77d6731b820.tar.bz2 | |
- Patch #781750 by sun: XSS in Filter Tips.
| -rw-r--r-- | modules/filter/filter.module | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/modules/filter/filter.module b/modules/filter/filter.module index 5de006690..874a84fa0 100644 --- a/modules/filter/filter.module +++ b/modules/filter/filter.module @@ -1190,7 +1190,7 @@ function _filter_html_tips($filter, $format, $long = FALSE) { $output .= '<p>' . t('This site allows HTML content. While learning all of HTML may feel intimidating, learning how to use a very small number of the most basic HTML "tags" is very easy. This table provides examples for each tag that is enabled on this site.') . '</p>'; $output .= '<p>' . t('For more information see W3C\'s <a href="@html-specifications">HTML Specifications</a> or use your favorite search engine to find other sites that explain HTML.', array('@html-specifications' => 'http://www.w3.org/TR/html/')) . '</p>'; $tips = array( - 'a' => array(t('Anchors are used to make links to other pages.'), '<a href="' . $base_url . '">' . variable_get('site_name', 'Drupal') . '</a>'), + 'a' => array(t('Anchors are used to make links to other pages.'), '<a href="' . $base_url . '">' . check_plain(variable_get('site_name', 'Drupal')) . '</a>'), 'br' => array(t('By default line break tags are automatically added, so use this tag to add additional ones. Use of this tag is different because it is not used with an open/close pair like all the others. Use the extra " /" inside the tag to maintain XHTML 1.0 compatibility'), t('Text with <br />line break')), 'p' => array(t('By default paragraph tags are automatically added, so use this tag to add additional ones.'), '<p>' . t('Paragraph one.') . '</p> <p>' . t('Paragraph two.') . '</p>'), 'strong' => array(t('Strong'), '<strong>' . t('Strong') . '</strong>'), |