diff options
| author | Steven Wittens <steven@10.no-reply.drupal.org> | 2005-12-27 18:42:49 +0000 |
|---|---|---|
| committer | Steven Wittens <steven@10.no-reply.drupal.org> | 2005-12-27 18:42:49 +0000 |
| commit | 4c66ab52f31d0b9718b7f4255536797695d187fc (patch) | |
| tree | e407cee5aa71bb0c7737e5c244204690cea1d057 /includes/xmlrpc.inc | |
| parent | eaa244d347977ec2c40a29af16a7bc7952372b84 (diff) | |
| download | brdo-4c66ab52f31d0b9718b7f4255536797695d187fc.tar.gz brdo-4c66ab52f31d0b9718b7f4255536797695d187fc.tar.bz2 | |
- #31301: Don't escape apostrophes in XML-RPC strings.
/me looks down
OH MY GOD... I'M MELLLLTTIIINNGG NOOOOOOO.... AAARGHHHHHH.
Oh well, don't the people inside the asylum say the outside world is insane, too?
Diffstat (limited to 'includes/xmlrpc.inc')
| -rw-r--r-- | includes/xmlrpc.inc | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/includes/xmlrpc.inc b/includes/xmlrpc.inc index 9ab6be402..fae8b1c1f 100644 --- a/includes/xmlrpc.inc +++ b/includes/xmlrpc.inc @@ -82,7 +82,9 @@ function xmlrpc_value_get_xml($xmlrpc_value) { return '<double>'. $xmlrpc_value->data .'</double>'; break; case 'string': - return '<string>'. check_plain($xmlrpc_value->data) .'</string>'; + // Note: we don't escape apostrophes because of the many blogging clients + // that don't support numerical entities (and XML in general) properly. + return '<string>'. htmlspecialchars($xmlrpc_value->data) .'</string>'; break; case 'array': $return = '<array><data>'."\n"; |